InternetNZ will begin a DNSSEC Zone Signing Key rollover in our standby chain, this should not affect the active chain used in DNS resolution for .nz, the status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window will be used to add new Zone Signing Keys. https://status.internetnz.nz/incidents/xlygrzg6d3tg The second change window will be used to remove inactive Zone Signing Keys. https://status.internetnz.nz/incidents/tftwdv101sz0 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Josh Simpson Product Infrastructure Lead InternetNZ | Ipurangi Aotearoa www.internetnz.nz