Trust Anchors and Keys
The Root Key Signing Key acts as the trust anchor for DNSSEC for the Domain Name System. This trust anchor is configured in DNSSEC-aware resolvers to facilitate validation of DNS data.
Root Zone Trust Anchor
root-anchors.xml
DNS Root Trust Anchors
Updated 2018-12-20
root-anchors.p7s
Signature to verify the DNS Root Trust Anchors file (S/MIME)
icannbundle.pem
Additional ICANN certificates for validating S/MIME signature
Note: Publication of a PGP signature for verification of the root anchors file has been discontinued in favour of S/MIME validation.
Attestations
Resources
Domain Names
Number Resources
Protocols
Protocol RegistriesTime Zone Database
About Us
The IANA functions coordinate the Internet’s globally unique identifiers, and are provided by Public Technical Identifiers, an affiliate of ICANN.
Privacy Policy
Terms of Service