This text is on: https://nlnetlabs.nl/downloads/unbound/root-11sep-11oct.txt == Description There is an issue for new installations between 11sep and 11oct 2017 with versions prior to 1.6.5 (1.6.4 or older). The KSK2017 will be added in the ADDPEND state for 30 days (RFC 5011) and will not be in the VALID state on 11oct. All is fine for trust anchor files created before 11sep and after 11oct 2017, in any Unbound version. == Solution for period 11 sep-11 oct 2017 Update to Unbound 1.6.5, or download the trust anchor file from the Unbound website. + Update to Unbound 1.6.5 Delete the root.key file with rm root.key before have unbound-anchor (1.6.5 or later) create the root.key file again, by running unbound-anchor. You can verify that worked by checking that both keys have the string VALID in the newly created root.key file. + Download the trust anchor file from the Unbound website If updating to Unbound 1.6.5 is not possible, a trust anchor file containing the two VALID keys can be fetched from: https://nlnetlabs.nl/downloads/unbound/root-11sep-11oct.key