Root Anchor Signature Update

Andres Pavez andres.pavez at
Thu Aug 12 17:30:35 UTC 2021

To Whom It May Concern, 

This is a notice that the signature file "root-anchors.p7s", a signature over the trust anchor file "root-anchors.xml", will be updated by the end of August 2021. 
The current signature file will expire in November 2021.

We have taken this opportunity to generate the new "root-anchors.p7s" without intermediate certificates while the new “icannbundle.pem” file contains only the ICANN Root CA certificate in PEM format.

We do not expect any issues with this change.

We have created a temporary sub-directory containing these files in should you want to preview this change. These files will be moved into the parent directory and the "stage" sub-directory will be removed by the end of August 2021

Thank you,
Andres Pavez
Cryptographic Key Manager
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2030 bytes
Desc: not available
URL: <>

More information about the root-dnssec-announce mailing list