The internet's root key rotates in five days. Your resolver may not be ready.

On October 11 KSK-2024 replaces the key that signed the DNS root for eight years. Resolvers that missed RFC 5011's window fail validation. Three checks, five minutes.