CINXE.COM

<!DOCTYPE html> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-gb" lang="en-gb" dir="ltr"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1">  <base href="https://www.afrinic.net/dnssec" /> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> <meta name="keywords" content="WHOIS, WHOIS, IPv4, IPv6, ASN, TCP, IP, Internet, Africa, development, network, not for profit, Mauritius, African, internet governance, internet policy" /> <meta name="author" content="Webmaster" /> <meta name="description" content="The African Network Information Centre (AFRINIC) is the Region Internet Registry for the African and part of Indian Ocean region, responsible for the management of IPv4, IPv6 and AS numbers." /> <title>DNSSEC Program - AFRINIC - Regional Internet Registry for Africa</title> <link href="https://www.afrinic.net/dnssec/amp" rel="amphtml" /> <link href="/ast/img/afrinic-logo/afrinic-logo-a-favicon.png" rel="shortcut icon" type="image/vnd.microsoft.icon" /> <link href="/templates/shaper_spectrum/favicon.ico" rel="shortcut icon" type="image/vnd.microsoft.icon" /> <link href="/plugins/system/jcemediabox/css/jcemediabox.min.css?0072da39200af2a5f0dbaf1a155242cd" rel="stylesheet" type="text/css" /> <link href="//fonts.googleapis.com/css?family=Quicksand:300,regular,500,700&subset=latin" rel="stylesheet" type="text/css" /> <link href="/templates/shaper_spectrum/css/bootstrap.min.css" rel="stylesheet" type="text/css" /> <link href="/templates/shaper_spectrum/css/font-awesome.min.css" rel="stylesheet" type="text/css" /> <link href="/templates/shaper_spectrum/css/legacy.css" rel="stylesheet" type="text/css" /> <link href="/templates/shaper_spectrum/css/template.css" rel="stylesheet" type="text/css" /> <link href="/templates/shaper_spectrum/css/presets/preset3.css" rel="stylesheet" type="text/css" class="preset" /> <link href="/templates/shaper_spectrum/css/custom.css" rel="stylesheet" type="text/css" /> <link href="/templates/shaper_spectrum/css/frontend-edit.css" rel="stylesheet" type="text/css" /> <link href="https://www.afrinic.net/modules/mod_datetime/tmpl/default.css" rel="stylesheet" type="text/css" /> <style type="text/css"> body{font-family:Quicksand, sans-serif; font-size:16px; font-weight:500; } h1{font-family:Quicksand, sans-serif; font-size:23px; font-weight:700; } h2{font-family:Quicksand, sans-serif; font-size:17px; font-weight:700; } h3{font-family:Quicksand, sans-serif; font-size:15px; font-weight:700; } h4{font-family:Quicksand, sans-serif; font-size:12px; font-weight:500; } h5{font-family:Quicksand, sans-serif; font-size:14px; font-weight:500; } h6{font-family:Quicksand, sans-serif; font-size:10px; font-weight:500; } .sp-megamenu-parent{font-family:Quicksand, sans-serif; font-size:15px; font-weight:500; } .card-cs { /* Add shadows to create the "card" effect */ box-shadow: 0 4px 8px 0 rgba(0,0,0,0.2); transition: 0.3s; width: 90%; } /* On mouse-over, add a deeper shadow */ .card-cs:hover { box-shadow: 0 8px 16px 0 rgba(0,0,0,0.2); } /* Add some padding inside the card container */ .container-cs { padding: 2px 16px; } .fa-bars:before { content: "\f0c9"; color: #d15e14; } CSS for Stats iframe on https://afrinic.net/ipv6-v2 .iframe-container { width: 100%; position: relative; overflow: hidden; padding-top: 100%; } .iframe-responsive { position: absolute; width: 100%; height: 100%; top: 0; right: 0; bottom: 0; left: 0; border: none; margin: 0px; padding: 0px; } .font9 { font-size: 12px; } .time { display: flex; justify-content: center; align-items: center; } #sp-utils-bar{ background-color:#000000;color:#ffffff;padding:0px 1.2em 0px 1.2em; } #sp-utils-bar a{color:#d15e14;} #sp-utils-bar a:hover{color:#ffffff;} #sp-header{ padding:0px auto 0px auto;margin:0px auto 5px auto; } #sp-main-body{ padding:0px 0px 10px 0px; } #sp-footer-menu{ background-color:#242e39;color:#ffffff;padding:20px 0px 5px 0px; } #sp-footer-menu a{color:#ffffff;} #sp-footer-menu a:hover{color:#d15e14;} #sp-bottom{ background-color:#242e39;color:#ffffff;padding:0px 0px 0px 0px;margin:0px; } #sp-bottom a{color:#ffffff;} #sp-bottom a:hover{color:#ffffff;} #sp-footer{ background-color:#242e39;color:#ffffff; } #sp-footer a{color:#d15e14;} .time { display: flex; justify-content: center; align-items: center; } </style> <script type="application/json" class="joomla-script-options new">{"csrf.token":"37afa1598377db351c846af45e0dc02e","system.paths":{"root":"","base":""}}</script> <script src="/media/jui/js/jquery.min.js?f5edda9a39a83880973f150b7d6459d2" type="text/javascript"></script> <script src="/media/jui/js/jquery-noconflict.js?f5edda9a39a83880973f150b7d6459d2" type="text/javascript"></script> <script src="/media/jui/js/jquery-migrate.min.js?f5edda9a39a83880973f150b7d6459d2" type="text/javascript"></script> <script src="https://cdn.printfriendly.com/printfriendly.js" type="text/javascript"></script> <script src="/media/system/js/caption.js?f5edda9a39a83880973f150b7d6459d2" type="text/javascript"></script> <script src="/plugins/system/jcemediabox/js/jcemediabox.min.js?d67233ea942db0e502a9d3ca48545fb9" type="text/javascript"></script> <script src="/media/system/js/core.js?f5edda9a39a83880973f150b7d6459d2" type="text/javascript"></script> <script src="/templates/shaper_spectrum/js/bootstrap.min.js" type="text/javascript"></script> <script src="/templates/shaper_spectrum/js/jquery.sticky.js" type="text/javascript"></script> <script src="/templates/shaper_spectrum/js/main.js" type="text/javascript"></script> <script src="/templates/shaper_spectrum/js/frontend-edit.js" type="text/javascript"></script> <script type="text/javascript"> var pfCustomCSS = ""; jQuery(window).on('load', function() { new JCaption('img.caption'); }); jQuery(document).ready(function(){WfMediabox.init({"base":"\/","theme":"standard","width":"","height":"","lightbox":0,"shadowbox":0,"icons":1,"overlay":1,"overlay_opacity":0.8,"overlay_color":"#000000","transition_speed":500,"close":2,"scrolling":"fixed","labels":{"close":"Close","next":"Next","previous":"Previous","cancel":"Cancel","numbers":"{{numbers}}","numbers_count":"{{current}} of {{total}}","download":"Download"}});}); jQuery(document).ready(function() { jQuery('#sp-left .nav.menu li.active.current > a ').css({"text-decoration":"underline","color":"black","background":"#cccccc"}); }); var sp_preloader = '0'; var sp_gotop = '1'; var sp_offanimation = 'slidetop'; </script> <meta property="og:url" content="https://www.afrinic.net/dnssec" /> <meta property="og:type" content="article" /> <meta property="og:title" content="AFRINIC DNSSEC Service" /> <meta property="og:description" content="AFRINIC manages and publishes Reverse DNS (RDNS) zone data for the IP space we allocate or assign to members. Zones includes IPv4 41.in-addr.arpa. 196.in-a..." />  <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "WebSite", "url": "https://afrinic.net", "potentialAction": { "@type": "SearchAction", "target": "https://www.afrinic.net/index.php?option=com_finder&q={search_term}", "query-input": "required name=search_term" } } </script> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Organization", "url": "https://afrinic.net", "logo": "https://www.afrinic.net/ast/img/afrinic-logo/afrinic_logo_mbl.png" } </script> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Organization", "name": "AFRINIC", "url": "https://afrinic.net", "sameAs": [ "https://www.facebook.com/afrinic", "https://twitter.com/afrinic", "https://www.instagram.com/afrinic", "https://www.youtube.com/c/AFRINIC", "https://www.linkedin.com/company/afrinic", "https://www.pinterest.com/afrinic" ] } </script> <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "item": { "@id": "http://www.afrinic.net/", "name": "AFRINIC" } }, { "@type": "ListItem", "position": 2, "item": { "@id": "http://www.afrinic.net/our-work", "name": "Our Work" } }, { "@type": "ListItem", "position": 3, "item": { "@id": "https://www.afrinic.net/dnssec", "name": "DNSSEC Program" } } ] } </script>  <link rel="canonical" href="https://afrinic.net/dnssec" />  <script type="text/javascript" src="https://cdn.cookielaw.org/consent/ebd7abec-671f-4042-8ccd-8155e3b22dcb/OtAutoBlock.js" ></script> <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" type="text/javascript" charset="UTF-8" data-domain-script="ebd7abec-671f-4042-8ccd-8155e3b22dcb" ></script> <script type="text/javascript"> function OptanonWrapper() { } </script>   <script async src="https://www.googletagmanager.com/gtag/js?id=G-H0GMQFDPXY"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-H0GMQFDPXY'); </script>  <script async src="https://www.googletagmanager.com/gtag/js?id=UA-50123650-5"></script> <script> window.dataLayer = window.dataLayer || [];https://afrinic.net/administrator/index.php?option=com_templates&view=style&layout=edit&id=9#attrib-custom_code function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-50123650-5'); </script> <script async src="https://www.googleoptimize.com/optimize.js?id=GTM-N8QGHBV"></script> <meta name="msvalidate.01" content="ACFB632BA93AC365F6D32DAD41ACB173" />  <script type="text/javascript" src="//widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js" async></script> <script> (function(w,d,s,r,n){w.TrustpilotObject=n;w[n]=w[n]||function(){(w[n].q=w[n].q||[]).push(arguments)}; a=d.createElement(s);a.async=1;a.src=r;a.type='text/java'+s;f=d.getElementsByTagName(s)[0]; f.parentNode.insertBefore(a,f)})(window,document,'script', 'https://invitejs.trustpilot.com/tp.min.js', 'tp'); tp('register', 'IfBqKpPqdeexJeZo'); </script>   <script id="mcjs">!function(c,h,i,m,p){m=c.createElement(h),p=c.getElementsByTagName(h)[0],m.async=1,m.src=i,p.parentNode.insertBefore(m,p)}(document,"script","https://chimpstatic.com/mcjs-connected/js/users/5c91ad679775a26d1a2515314/a2c2eac2bbf6515fe5fe29fa3.js");</script> <meta name="google-site-verification" content="QsahxC0Hqcdk6Q-bS24gFVtlveVJJCTkqXaoYeuL04s" /> </head> <body class="site com-content view-article no-layout no-task itemid-663 en-gb ltr layout-fluid off-canvas-menu-init"> <div class="body-wrapper"> <div class="body-innerwrapper"> <section id="sp-utils-bar" class=" hidden-xs"><div class="row"><div id="sp-top1" class="col-sm-1 col-md-4 hidden-sm hidden-xs"><div class="sp-column time"><div class="sp-module "><div class="sp-module-content"> <script type="text/javascript"> /* <![CDATA[ */ function doGTranslate(lang_pair) {if(lang_pair.value)lang_pair=lang_pair.value;if(lang_pair=='')return;var lang=lang_pair.split('|')[1];var plang=location.pathname.split('/')[1];if(plang.length !=2 && plang != 'zh-CN' && plang != 'zh-TW')plang='en';location.href=location.protocol+'//'+location.host+'/'+lang+'/dnssec';} /* ]]> */ </script> <a href="https://www.afrinic.net/dnssec" onclick="doGTranslate('en|en');return false;" title="English" class="flag nturl notranslate">English</a> <a href="/ar/dnssec" onclick="doGTranslate('en|ar');return false;" title="丕賱毓乇亘賷丞" class="flag nturl notranslate">丕賱毓乇亘賷丞</a> <a href="/fr/dnssec" onclick="doGTranslate('en|fr');return false;" title="Fran莽ais" class="flag nturl notranslate">Fran莽ais</a> <a href="/pt/dnssec" onclick="doGTranslate('en|pt');return false;" title="Portugu锚s" class="flag nturl notranslate">Portugu锚s</a> </div></div></div></div><div id="sp-top-whois-faq" class="col-xs-6 col-sm-6 col-md-4"><div class="sp-column "><div class="sp-module "><div class="sp-module-content"> <div class="custom" > <p style="text-align: left;"><span style="color: #;"> <strong> <a class="jcepopup noicon" style="color: #;" title="AFRINIC Web WHOIS Interface" href="/whois?lang=en" data-mediabox="1" data-mediabox-title="AFRINIC Web WHOIS Interface">WHOIS SEARCH</a>聽聽聽聽聽聽聽聽聽聽聽聽聽 <a class="jcepopup noicon" style="color: #;" title="MEMBERS PORTAL" href="https://my.afrinic.net/login" target="_blank" rel="noopener noreferrer" data-mediabox="1" data-mediabox-title="AFRINIC Web WHOIS Interface">LOGIN TO MYAFRINIC</a></strong></span></p></div> </div></div></div></div><div id="sp-top3" class="col-xs-3 col-sm-3 col-md-4"><div class="sp-column time"><div class="sp-module "><div class="sp-module-content"><div class="itp-gs"> <form action="/component/itpgooglesearch/search" method="get" accept-charset="utf-8"> <input name="gsquery" type="text" class="inputbox" placeholder="Search for..." value="" /> </form> </div></div></div></div></div></div></section><header id="sp-header"><div class="container"><div class="row"><div id="sp-logo" class="col-xs-4 col-sm-4 col-md-3"><div class="sp-column "><div class="logo"><a href="/"><img class="sp-default-logo hidden-xs" src="/ast/img/afrinic-logo/afrinic_logo.png" alt="AFRINIC - Regional Internet Registry for Africa"><img class="sp-retina-logo hidden-xs" src="/ast/img/afrinic-logo/afrinic_logo.png" alt="AFRINIC - Regional Internet Registry for Africa" width="202" height="85"><img class="sp-default-logo visible-xs" src="/ast/img/afrinic-logo/afrinic_logo.png" alt="AFRINIC - Regional Internet Registry for Africa"></a></div></div></div><div id="sp-menu" class="col-xs-8 col-sm-8 col-md-9"><div class="sp-column "> <div class='sp-megamenu-wrapper'> <a id="offcanvas-toggler" class="visible-sm visible-xs" href="#"><i class="fa fa-bars"></i></a> <ul class="sp-megamenu-parent menu-fade hidden-sm hidden-xs"><li class="sp-menu-item"></li><li class="sp-menu-item"></li><li class="sp-menu-item sp-has-child"><a href="/about" >About us</a><div class="sp-dropdown sp-dropdown-main sp-menu-right" style="width: 240px;"><div class="sp-dropdown-inner"><ul class="sp-dropdown-items"><li class="sp-menu-item"><a href="/history" >History</a></li><li class="sp-menu-item"><a href="/partners" >Our Partners</a></li><li class="sp-menu-item"><a href="/membership" >Membership</a></li><li class="sp-menu-item"><a href="/service-region" >Our Service Region</a></li><li class="sp-menu-item"><a href="/agmm" >AGMM</a></li><li class="sp-menu-item"><a href="/membership/cost" >Fees Schedule</a></li><li class="sp-menu-item"><a href="/governance" >Governance</a></li><li class="sp-menu-item"><a href="/stats" >Statistics</a></li><li class="sp-menu-item"><a href="/corporate-documents" >Corporate Documents</a></li><li class="sp-menu-item"><a href="/team" >Our Team</a></li><li class="sp-menu-item"><a href="/contact" >Contact us</a></li></ul></div></div></li><li class="sp-menu-item sp-has-child alias-parent-active"><a href="/our-work" >Our Work</a><div class="sp-dropdown sp-dropdown-main sp-menu-right" style="width: 240px;"><div class="sp-dropdown-inner"><ul class="sp-dropdown-items"><li class="sp-menu-item"><a href="/membership" >Membership Services</a></li><li class="sp-menu-item"><a href="/resources" >Internet Number Resources Management</a></li><li class="sp-menu-item"><a href="/reverse-dns" >Reverse DNS</a></li><li class="sp-menu-item"><a href="/whois" >WHOIS</a></li><li class="sp-menu-item"><a href="/membership/cost" >Fees Schedule</a></li><li class="sp-menu-item"><a href="/internet-routing-registry" >Internet Routing Registry (IRR)</a></li><li class="sp-menu-item active"><a href="/dnssec" >DNSSEC Program</a></li><li class="sp-menu-item"><a href="/resource-certification" >Resource Certification Program (RPKI)</a></li><li class="sp-menu-item"><a href="/corporate-documents" >Corporate Documents</a></li><li class="sp-menu-item"><a href="http://learn.afrinic.net/" rel="noopener noreferrer" target="_blank" >Training Services</a></li><li class="sp-menu-item"><a href="/support" >Support & FAQs</a></li><li class="sp-menu-item"><a href="/changelog" >Online Services Changelog</a></li><li class="sp-menu-item"><a href="/dns-support" >DNS Support Program</a></li><li class="sp-menu-item"><a href="/root-server-copy" >Root Server Copy Program</a></li><li class="sp-menu-item"><a href="/internet-development-programs" >Internet Development Programs</a></li></ul></div></div></li><li class="sp-menu-item sp-has-child"><a href="/participate" >Participate</a><div class="sp-dropdown sp-dropdown-main sp-menu-right" style="width: 240px;"><div class="sp-dropdown-inner"><ul class="sp-dropdown-items"><li class="sp-menu-item"><a href="/code" >Code of Conduct</a></li><li class="sp-menu-item"><a href="/email" >Email & Mailing Lists</a></li><li class="sp-menu-item"><a href="/policy" >Policy Development</a></li><li class="sp-menu-item"><a href="/committees/afgwg" >Governments</a></li><li class="sp-menu-item"><a href="/committees" >Committees</a></li><li class="sp-menu-item"><a href="/election-process" >Elections</a></li><li class="sp-menu-item"><a href="/exhaustion" >IPv4 Exhaustion</a></li><li class="sp-menu-item"><a href="/internet-governance" >Internet Governance</a></li><li class="sp-menu-item"><a href="/privacy" >Privacy</a></li></ul></div></div></li><li class="sp-menu-item sp-has-child"><a href="/events" >Events</a><div class="sp-dropdown sp-dropdown-main sp-menu-left" style="width: 240px;"><div class="sp-dropdown-inner"><ul class="sp-dropdown-items"><li class="sp-menu-item"><a href="https://meeting.afrinic.net" rel="noopener noreferrer" target="_blank" >Meetings</a></li><li class="sp-menu-item"><a href="/events/sponsorship" >Sponsorship Opportunities</a></li><li class="sp-menu-item"><a href="/events/hosting-guide" >Hosting Guide</a></li><li class="sp-menu-item"><a href="http://learn.afrinic.net/events" rel="noopener noreferrer" target="_blank" >Training Workshops</a></li><li class="sp-menu-item"><a href="/outreach" >Outreach</a></li><li class="sp-menu-item"><a href="/events/webinar-series" >Webinar Series</a></li></ul></div></div></li><li class="sp-menu-item sp-has-child"><a href="/news" >Media</a><div class="sp-dropdown sp-dropdown-main sp-menu-left" style="width: 240px;"><div class="sp-dropdown-inner"><ul class="sp-dropdown-items"><li class="sp-menu-item"><a href="/news" >News</a></li><li class="sp-menu-item"><a href="/press" >Press Releases</a></li><li class="sp-menu-item"><a href="/presentations" >Presentations</a></li><li class="sp-menu-item"><a href="/factsheets" >Factsheets</a></li><li class="sp-menu-item"><a href="/newsletter" >Newsletter</a></li><li class="sp-menu-item"><a href="/branding" >Branding</a></li><li class="sp-menu-item"><a href="/post-guidelines" >Contribution Guidelines</a></li></ul></div></div></li><li class="sp-menu-item"><a href="https://blog.iso.afrinic.net/" >Blog</a></li><li class="sp-menu-item"></li><li class="sp-menu-item"></li><li class="sp-menu-item"></li></ul> </div> </div></div></div></div></header><section id="sp-localisation-notice"><div class="row"><div id="sp-localisation-notice" class="col-sm-12 col-md-12"><div class="sp-column "><div class="sp-module "><div class="sp-module-content"> <div class="custom" > <div id="English-Notice"> <div class="alert alert-info" style="text-align: center;"><i class="fa fa-exclamation-triangle" aria-hidden="true"></i> <strong>Info!</strong> Please note that this translation has been provided at best effort, for your convenience. The English page remains the official version.</div> </div></div> </div></div></div></div></div></section><section id="sp-main-body"><div class="row"><div id="sp-left" class="col-sm-2 col-md-3 hidden-sm hidden-xs"><div class="sp-column "><div class="sp-module "><h3 class="sp-module-title">Our Work</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-828 active deeper parent"><a href="/our-work" > Our Work</a><ul><li class="item-495"><a href="/membership" > Membership Services</a></li><li class="item-491 deeper parent"><a href="/resources" > Internet Number Resources Management</a><ul><li class="item-3261"><a href="/asn" > Autonomous System Number (ASN)</a></li><li class="item-3452"><a href="/resources/ipv6" > Internet Protocol Version 6 (IPv6)</a></li><li class="item-493"><a href="/resources/transfers" > Resource Transfers</a></li><li class="item-3156"><a href="/resources/management" > Resource Management</a></li></ul></li><li class="item-667 deeper parent"><a href="/resource-certification" > Resource Certification Program (RPKI)</a><ul><li class="item-3281"><a href="/resource-certification/tal" > Trust Anchor Locator (TAL)</a></li></ul></li><li class="item-662"><a href="/internet-routing-registry" > Internet Routing Registry (IRR)</a></li><li class="item-663 current active"><a href="/dnssec" > DNSSEC Program</a></li><li class="item-728"><a href="/support" > Support & FAQs</a></li><li class="item-499 deeper parent"><a href="/corporate-documents" > Corporate Documents</a><ul><li class="item-510"><a href="/bylaws" target="_blank" > Bylaws</a></li><li class="item-505"><a href="/membership/agreements" target="_blank" > Membership Agreements</a></li><li class="item-804"><a href="/commitment" > Service Level Commitment (SLC)</a></li><li class="item-562"><a href="/policy/manual" > Consolidated Policy Manual</a></li></ul></li><li class="item-511 deeper parent"><a href="/whois" > WHOIS</a><ul><li class="item-3240"><a href="/whois/terms" > Terms of Use</a></li><li class="item-514"><a href="/whois/utilities" > WHOIS Crypt</a></li><li class="item-3404"><a href="/whois/ip-tools" > IP Tools</a></li><li class="item-3405"><a href="/whois/data-protection" > Your data protection</a></li><li class="item-1208"><a href="/whois/lame" > Lame Tool</a></li><li class="item-2527"><a href="/whois/rdap" > RDAP</a></li></ul></li><li class="item-515"><a href="http://learn.afrinic.net/" target="_blank" > Training Services</a></li><li class="item-2792"><a href="/changelog" > Online Services Changelog</a></li><li class="item-655"><a href="/dns-support" > DNS Support Program</a></li><li class="item-670"><a href="/root-server-copy" > Root Server Copy Programme</a></li><li class="item-3380"><a href="/products" > Products Roadmap</a></li></ul></li><li class="item-3684"><a href="/reverse-dns" > Reverse DNS</a></li><li class="item-3688 deeper parent"><a href="/internet-development-programs" > Internet Development Programs</a><ul><li class="item-3689"><a href="/internet-development-programs/the-fellowship-program" > The Fellowship Program</a></li><li class="item-3690"><a href="/internet-development-programs/technical-community-development-program" > Technical Community Development Program</a></li><li class="item-3691"><a href="/internet-development-programs/african-research-collaboration-program" > African Research Collaboration Program</a></li><li class="item-3692"><a href="/internet-development-programs/diversity-in-ict-program" > Diversity in ICT Program</a></li><li class="item-3693"><a href="/internet-development-programs/african-critical-infrastructure-development-program" > African Critical Infrastructure Development Program</a></li><li class="item-3694"><a href="/internet-development-programs/african-internet-governance-and-ict-initiatives-development-program" > African Internet Governance and ICT Initiatives Development Program</a></li></ul></li></ul> </div></div></div></div><div id="sp-component" class="col-xs-12 col-sm-12 col-md-9"><div class="sp-column "><div id="system-message-container"> </div> <article class="item item-page" itemscope itemtype="http://schema.org/Article"> <meta itemprop="inLanguage" content="en-GB" /> <div class="entry-header"> <h1 itemprop="name"> AFRINIC DNSSEC Service </h1> </div> <div itemprop="articleBody"> <p>AFRINIC manages and publishes Reverse DNS (RDNS) zone data for the IP space we allocate or assign to members.</p> <table class="table table-bordered table-striped table-hover table-condensed table-responsive"> <tbody> <tr> <td colspan="2"><strong>Zones includes</strong></td> </tr> <tr> <td> <p>IPv4</p> <ul> <li>41.in-addr.arpa.</li> <li>196.in-addr.arpa.</li> <li>197.in-addr.arpa.</li> <li>102.in-addr.arpa.</li> <li>105.in-addr.arpa.</li> <li>154.in-addr.arpa.</li> </ul> </td> <td> <p>IPv6</p> <ul> <li>0.c.2.ip6.arpa.</li> <li>3.4.1.0.0.2.ip6.arpa.</li> <li>2.4.1.0.0.2.ip6.arpa.</li> </ul> </td> </tr> <tr> <td colspan="2"><strong>Objective</strong></td> </tr> <tr> <td colspan="2"> <p>DNSSEC deployment at AFRINIC aims to</p> <ul> <li>Sign these zones.</li> <li>Publish DS record in parent zones</li> <li>Accept DS records from our members</li> </ul> </td> </tr> </tbody> </table> <p>It allows the community to validate authoritative DNS data from AFRINIC's RDNS zones and members to publish DS records to build the chain of trust for their RDNS zones.</p> <p>DNSSEC deployment is a NRO coordinated project as ERX blocks need coordinated actions. 聽All communications regarding these projects should be sent to聽dnssec-ops[at]afrinic[dot]net</p> <p>We have adopted a plan for a carefully incremental deployment of DNSSEC at AFRINIC.聽</p> <p><strong>Deployment Plan</strong></p> <p>Once the testing phase is completed, AFRINIC will integrate the Signer into the provisioning system in 3 phases. In this phase, the provisioning system continues to work as it is. When new zones are generated, copies of the distributed unsigned zones are passed to the signer to produce a signed zone.</p> <p><strong>Deployment Test Phases</strong></p> <ul> <li>Install the tools (Opendnssec, NSD, BIND, DSC, etc.)</li> <li>Generate keys for the zones -聽KSK RSA 2048 /聽ZSK RSA 1024</li> <li>Get Unsigned zone into OpenDNSSEC and sign</li> <li>Publish the signed zones under the local DNS servers</li> <li>Query and analyse response sizes over UDP and TCP</li> <li>Validation using keys as trusted keys</li> <li>Test Keys rollover: ZSK and KSK</li> <li>Scheduled key rollovers and emergency key rollover</li> <li>Conclusions and lessons learnt</li> </ul> <hr /> <h3>Phase 1 -聽Published聽Unsigned Zones</h3> <p>The signed zone is checked and loaded on a public DNS server. All tests are conducted around the public DNS server. AFRINIC will evaluate here the operation of the signer and the updated provisioning system.聽</p> <ul> <li>The new provisioning system: consistent signed zones generation</li> <li>Consistency check for zones content: non DNSSEC queries on both (unsigned and signed)</li> <li>DNSSEC queries to the signed zones</li> <li>Conclusions and lessons learnt</li> </ul> <hr /> <h3>Phase 2 -聽Publish Signed Zones</h3> <p>With a successful previous stage, the next step will be to start publishing signed zones instead of unsigned zones. In this phase, the Reverse DNS provisioning system will start publishing signed zones with adequate notification and a rollback plan. Only zones produced by the signer are distributed to the NS servers.</p> <p><strong>Test</strong></p> <ul> <li>Zones transfer master/slaves consistency</li> <li>Non dnssec queries on all NS</li> <li>DNSsec queries on all NS</li> <li>Conclusions and lessons learnt</li> </ul> <p><strong>Rollback Plan</strong></p> <p>Rollback from the phase where AfriNIC is publishing signed zones without DS in parent zones is as follows:</p> <ol> <li>A maintenance window for the rollback is open.</li> <li>Notice of the impending maintenance, with a technical description of the change, will be sent to the community.</li> <li>During the maintenance window, AfriNIC will begin to serve an unsigned zones, stripped of all DNSSEC information. SOA serial increases in order to trigger the distribution of the unsigned zone.</li> <li>A detailed technical report of the circumstances leading to the rollback, and the execution of the rollback itself are sent to the community.</li> </ol> <hr /> <h3>Phase 3 -聽DS publication in parent zones</h3> <p>With the publishing of signed zones completed, AFRINIC RDNS zones are not yet DNSSEC secured. DS records of KSKs have to be published in the parent zones. DS records will be generated and sent to IANA through their RDNS management system.聽</p> <p>The provisioning will be configured to process DS records for sub-domains. The signer and the zones publication are not modified.聽With a full DNSSEC system tested and launched with measures in place to operate as per the DPS, the project will move to the normal AFRINIC operations. Monitoring and performance measurement will be constant activities.</p> <p><strong>Tests</strong></p> <ul> <li>Query for the DS record on all ip6.arpa and in-addr.arpa servers</li> <li>DNSSEC validation of signed RRs in AFRINIC signed zones with root key as trusted key</li> <li>Conclusions and lessons learnt</li> </ul> <p><strong>Rollback Plan</strong></p> <p>Rollback from the phase where AfriNIC is publishing signed zones with DS in parent zones is as follows:</p> <ol> <li>A maintenance window for the rollback is open.</li> <li>Notice of the circumstances and the remedial action intended, with technical detail, will be sent to the community.</li> <li>AfriNIC will execute an emergency KSK rollover to remove the DS records from parent zones.</li> <li>Public communication with the community will continue, with the goal of ensuring that news of the situation and the actions being taken are communicated to as wide a public audience as possible.</li> <li>Following the appropriate publication delay, as specified by the DPS, AfriNIC will execute a transition to an unsigned zones as described in the phase where AfriNIC is publishing signed zones without DS in parent zones.</li> </ol> <hr /> <h3>Members DS records publication</h3> <p><strong>Tests</strong></p> <ul> <li>DS processing and DS RRs signing</li> <li>Chain of trust validation from root to child zone (with DS records published)</li> <li>Conclusions and lessons learnt聽</li> </ul> <hr /> <h3>DNSSEC Practice Statement - DPS</h3> <p><strong>Zone Signing parameters -聽Key Lengths and Algorithms</strong></p> <ul> <li>Key Signing Key: We use a key length of 2048 bits with RSA as the generation algorithm.</li> <li>Zone Signing Key:聽We use a key length of 1024 bits with RSA as the generation algorithm.</li> <li>Authenticated Denial of Existence:聽Authenticated denial of existence will be provided through the use of NSEC records as specified in RFC 4034.</li> <li>Signature Format:聽Our signatures are created with the SHA2-256 hash using RSA.</li> <li>Zone Signing Key Roll-over:聽We will roll the ZSK on a monthly basis with a pre-publishing scheme as described in RFC 4641, section 4.2.1.1.</li> <li>Key Signing Key Roll-over:聽We will roll the KSK on a yearly basis with a double-signing scheme as described in RFC 4641, section 4.2.1.2.</li> <li>Signature Life-time and Re-signing Frequency:聽We re-sign our zones once a new zone are generated with a signature lifetime of 15 days.</li> </ul> <p><strong>Resource Records Time-to-live -聽Record type TTL</strong></p> <ul> <li>DNSKEY:聽Equal to the TTL used for the SOA record</li> <li>NSEC:聽Equal to the minimum field of the SOA record</li> <li>RRSIG:聽Equal to the lowest TTL of the record set covered</li> <li>DS:聽Equal to the TTL used for the NS record</li> </ul> <hr /> <h3>DNSSEC delegations</h3> <p>Procedure for Requesting DNSSEC Delegations (Date: April 2012 -聽Version:1.0)</p> <p>This section describes how to request DNSSEC Delegations. It is in addition to the existing procedure for requesting reverse delegations.</p> <p>Please note that until further notice from AfriNIC, DS RECORDS will not be visible in the DNS. Watch out for upcoming news from us.</p> <p><strong>1 - The DOMAIN Object</strong></p> <p>You can request reverse delegation by submitting domain objects via auto-dbm(e-mail) or via MyAFRINIC, which is the recommended method[1]. DNSSEC will not mean any change to the existing authorization mechanisms.聽To enable the DNSSEC delegation, the domain object now includes a "ds-rdata:" attribute.</p> <pre>domain: [mandatory] [single] [primary/look-up key]<br />descr: [mandatory] [multiple] [ ]<br />org: [optional] [multiple] [inverse key]<br />admin-c: [mandatory] [multiple] [inverse key]<br />tech-c: [mandatory] [multiple] [inverse key]<br />zone-c: [mandatory] [multiple] [inverse key]<br />nserver: [optional] [multiple] [inverse key]<br />ds-rdata: [optional] [multiple] [inverse key]<br />sub-dom: [optional] [multiple] [inverse key]<br />dom-net: [optional] [multiple] [ ]<br />remarks: [optional] [multiple] [ ]<br />notify: [optional] [multiple] [inverse key]<br />mnt-by: [optional] [multiple] [inverse key]<br />mnt-lower: [optional] [multiple] [inverse key]<br />refer: [optional] [single] [ ]<br />changed: [mandatory] [multiple] [ ]<br />source: [mandatory] [single] [ ]</pre> <hr /> <p>聽<strong>2- The "ds-rdata:" Attribute</strong></p> <p>In DNSSEC, the Delegation Signer (DS) Resource Record is created from a DNSKEY Resource Record by comparing it with the public key. The parent publishes and signs the DS Resource Record.聽The "ds-rdata:" attribute contains the RDATA of the DS Resource Records related to the domain (as shown in the "domain:" attribute).</p> <pre>Ds-rdata: 55555 8 2 CABC3A8AF15E93741BF45096DB1D3451D93B2F541166EA44F2D4781753328CB8</pre> <hr /> <p><strong>聽3- Delegation Checks</strong></p> <p>When you submit your update through MyAFRINIC, the update engine will perform a number of check as shown by the picture below.</p> <p><img src="/ast/img/service-bpki/dnssec_FlowchartDSValidation.png" alt="dnssec FlowchartDSValidation" width="459" height="307" /></p> <ul> <li>Keep all the default checks MyAfrinic does on the reverse delegation</li> <li>Syntax check is done to ensure the DS entered is in the correct format:</li> <li>keytag: {0-65535}; Algorithm:{3|5|6|7|8|10|12|253|254}; Digest type:{1-3}; Digest:{alphanumeric}</li> <li>Digest length depends on digest type as follows:聽Type 1 (Sha1): 160 bit (40 Characters) /聽Type 2 (Sha256) or 3(gost): 256 bit (64 Characters)</li> <li>Check if a key exists in child zone with the key tag in the DS record</li> <li>Check if the algorithm of the key matches the key algorithm in the DS attributes</li> <li>Check if the digest matches the Key with the corresponding tag in child zone</li> <li>Check if there an RRSIG covering the DNSKEY corresponding to the DS submitted and is valid.</li> </ul> <p>[1] Currently there is no check and validation for DS submitted through auto-dbm</p> <hr /> <h3>AFRINIC DNSSEC Communication plan</h3> <p>Effective communication is critical for the success of this effort, the transition being undertaken having a potential impact AFRINIC RDNS services. Communication with AFRINIC members and the community at large is important. The staged deployment strategy allows time for the impact of these incremental steps to be communicated back to the team executing them. In order for the right decisions to be made it is vital that the appropriate channels are in place to encourage that communication to happen.</p> <p>Announcements, releases and other pertinent information will be published on the AFRINIC website<a href="http://www.AFRINIC.net/dnssec/.">.</a> Periodic technical status updates will be sent to various mailing lists in order to keep technical and operational communities informed of developments.</p> <p>The e-mail address dnssec-ops [at]AFRINIC.net聽will allow any interested party to communicate directly with the project team. A mailing list dnssec-discuss [at] afrinic.net聽will be used to discuss AFRINIC's DNSSEC deployment and services聽</p> <h3>Workshop Slides</h3> <ol> <li><a href="/ast/pdf/projects/dnssec-afrinic-general.pdf" target="_blank" rel="noopener noreferrer">DNSSEC AFRINIC</a></li> <li><a href="/ast/pdf/projects/dnssec-tutorial-crypto-defs.pdf" target="_blank" rel="noopener noreferrer">DNSSEC-Tutorial-Crypto-Defs</a></li> <li><a href="/ast/pdf/projects/introduction-dnssec.pdf" target="_blank" rel="noopener noreferrer">Introduction-DNSSEC</a></li> <li><a href="/ast/pdf/projects/short-cryptography-overview.pdf" target="_blank" rel="noopener noreferrer">Short-Cryptography-Overview</a></li> </ol> <p>聽</p> <p>聽</p> </div> <div class="article-footer-wrap"> <div class="article-footer-top"> <div class="helix-social-share"> <div class="helix-social-share-icon"> <ul> <li> <div class="facebook" data-toggle="tooltip" data-placement="top" title="Share On Facebook"> <a class="facebook" onClick="window.open('http://www.facebook.com/sharer.php?u=https://www.afrinic.net/dnssec','Facebook','width=600,height=300,left='+(screen.availWidth/2-300)+',top='+(screen.availHeight/2-150)+''); return false;" href="http://www.facebook.com/sharer.php?u=https://www.afrinic.net/dnssec"> <i class="fa fa-facebook"></i> </a> </div> </li> <li> <div class="twitter" data-toggle="tooltip" data-placement="top" title="Share On Twitter"> <a class="twitter" onClick="window.open('http://twitter.com/share?url=https://www.afrinic.net/dnssec&text=AFRINIC%20DNSSEC%20Service','Twitter share','width=600,height=300,left='+(screen.availWidth/2-300)+',top='+(screen.availHeight/2-150)+''); return false;" href="http://twitter.com/share?url=https://www.afrinic.net/dnssec&text=AFRINIC%20DNSSEC%20Service"> <i class="fa fa-twitter"></i> </a> </div> </li> <li> <div class="google-plus"> <a class="gplus" data-toggle="tooltip" data-placement="top" title="Share On Google Plus" onClick="window.open('https://plus.google.com/share?url=https://www.afrinic.net/dnssec','Google plus','width=585,height=666,left='+(screen.availWidth/2-292)+',top='+(screen.availHeight/2-333)+''); return false;" href="https://plus.google.com/share?url=https://www.afrinic.net/dnssec" > <i class="fa fa-google-plus"></i></a> </div> </li> <li> <div class="linkedin"> <a class="linkedin" data-toggle="tooltip" data-placement="top" title="Share On Linkedin" onClick="window.open('http://www.linkedin.com/shareArticle?mini=true&url=https://www.afrinic.net/dnssec','Linkedin','width=585,height=666,left='+(screen.availWidth/2-292)+',top='+(screen.availHeight/2-333)+''); return false;" href="http://www.linkedin.com/shareArticle?mini=true&url=https://www.afrinic.net/dnssec" > <i class="fa fa-linkedin-square"></i></a> </div> </li> </ul> </div> </div>  </div> </div> <div class="printfriendly-button-wrapper" style="text-align: right"><a class="printfriendly-button print-no" style="cursor: pointer" onclick="window.print(); return false;" title="Print Friendly, PDF & Email"><img style="border:none;-webkit-box-shadow:none; box-shadow:none;" src="https://cdn.printfriendly.com/buttons/printfriendly-button-lg.png" alt="Print Friendly, PDF & Email"></a></div> <dd class="modified"> <i class="fa fa-calendar-o"></i> Last Modified on - <time datetime="2023-06-09T06:45:04+04:00" itemprop="dateModified" title="Last Modified on - "> 09 June 2023 </time> </dd> </article></div></div></div></div></section><section id="sp-footer-menu" class=" hidden-xs"><div class="container"><div class="row"><div id="sp-position1" class="col-sm-3 col-md-3"><div class="sp-column font9"><div class="sp-module "><h3 class="sp-module-title">Member Services</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-3705"><a href="/membership" > Become a member</a></li><li class="item-3697"><a href="/resources-2" > Internet Number Resources Management</a></li><li class="item-3698"><a href="/asn-2" > Autonomous System Number (ASN)</a></li><li class="item-3699"><a href="/ipv6-2" > Internet Protocol Version 6 (IPv6)</a></li><li class="item-3700"><a href="/transfers-2" > Resource Transfers</a></li><li class="item-3701"><a href="/management-2" > Resource Management</a></li></ul> </div></div></div></div><div id="sp-position2" class="col-sm-3 col-md-3"><div class="sp-column font9"><div class="sp-module "><h3 class="sp-module-title">Routing Security</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-3702"><a href="/resource-certification-2" > Resource Certification Program (RPKI)</a></li><li class="item-3703"><a href="/tal-2" > Trust Anchor Locator (TAL)</a></li><li class="item-3704"><a href="/internet-routing-registry-2" > Internet Routing Registry (IRR)</a></li></ul> </div></div><div class="sp-module "><h3 class="sp-module-title">DNS</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-3718"><a href="/reverse-dns-2" > Reverse DNS</a></li><li class="item-3716"><a href="/dnssec-2" > DNSSEC Program</a></li><li class="item-3717"><a href="/dns-support-2" > DNS Support Program</a></li></ul> </div></div></div></div><div id="sp-position3" class="col-sm-3 col-md-3"><div class="sp-column font9"><div class="sp-module "><h3 class="sp-module-title">WHOIS</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-3706"><a href="/whois-2" > WHOIS</a></li><li class="item-3707"><a href="/terms-2" > Terms of Use</a></li><li class="item-3708"><a href="/utilities-2" > WHOIS Crypt</a></li><li class="item-3709"><a href="/ip-tools-2" > IP Tools</a></li><li class="item-3710"><a href="/data-protection-2" > Your data protection</a></li><li class="item-3712"><a href="/lame-2" > Lame Tool</a></li><li class="item-3713"><a href="/whois/rdap" > RDAP`</a></li></ul> </div></div></div></div><div id="sp-position4" class="col-sm-3 col-md-3"><div class="sp-column font9"><div class="sp-module "><h3 class="sp-module-title">Training</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-3715"><a href="http://learn.afrinic.net/" target="_blank" > Training Services</a></li><li class="item-3714"><a href="http://learn.afrinic.net/events" target="_blank" > Training Workshops</a></li></ul> </div></div><div class="sp-module "><h3 class="sp-module-title">Events</h3><div class="sp-module-content"><ul class="nav menu"> <li class="item-3719"><a href="https://meeting.afrinic.net" > Our Meetings</a></li><li class="item-3720"><a href="/webinar-series-2" > Webinar Series</a></li><li class="item-3721"><a href="/past-webinars-2" > Past webinars</a></li></ul> </div></div></div></div></div></div></section><section id="sp-bottom" class="font9 hidden-xs"><div class="container"><div class="row"><div id="sp-bottom1" class="col-xs-6 col-sm-6 col-md-4"><div class="sp-column font9"><ul class="social-icons"><li><a target="_blank" href="https://www.facebook.com/afrinic"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/afrinic"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.youtube.com/c/AFRINIC"><i class="fa fa-youtube"></i></a></li><li><a target="_blank" href="https://twitter.com/afrinic"><i class="fa fa-linkedin"></i></a></li><li><a target="_blank" href="https://www.flickr.com/photos/afrinic/"><i class="fa fa-flickr"></i></a></li><li><a target="_blank" href="/news/feed?format=feed&type=rss"><i class="fa fa-rss"></i></a></li></ul></div></div><div id="sp-time" class="col-xs-6 col-sm-4 col-md-4"><div class="sp-column time"><div class="sp-module "><div class="sp-module-content"> <span class="mod_datetime">Date and time in Mauritius - <time datetime="2024-11-25T21:34:47+04:00">2024/11/25 <span id="mod_datetime_custom_time_301"></span> <script type="text/javascript">  </script></time></span> </div></div></div></div><div id="sp-bottom2" class="col-xs-6 col-sm-6 col-md-4 hidden-xs"><div class="sp-column font9"><div class="sp-module "><div class="sp-module-content"> <div class="custom" > <p style="text-align: right;"><a title="AFRINIC Online Services Status" href="http://status.afrinic.net/" target="_blank" rel="help noopener noreferrer">Service Status</a> | <a href="/changelog" rev="contents">Changelog</a> | <a href="/support?lang=en" data-mce-empty="1">聽</a><a href="/website-use-terms?lang=en-GB" target="_blank" rel="noopener noreferrer" rev="contents">Disclaimer</a> |聽 <a href="/privacy" target="_blank" rel="noopener noreferrer">Privacy</a></p></div> </div></div></div></div></div></div></section><footer id="sp-footer" class=" affix-bottom"><div class="container"><div class="row"><div id="sp-footer1" class="col-sm-12 col-md-12"><div class="sp-column font9"><span class="sp-copyright"><div align="center">漏Copyright <script>document.write( new Date().getFullYear() );</script>. All Rights Reserved - African Network Information Centre <a href="https://afrinic.net" target="_blank"> (AFRINIC)</a><br><img src="/ast/img/afrinic-logo/afrinic-iso.svg" alt="" width="60" height="40" /></div></span></div></div></div></div></footer> </div>  </div>   <div class="offcanvas-menu"> <a href="#" class="close-offcanvas"><i class="fa fa-remove"></i></a> <div class="offcanvas-inner"> <div class="sp-module "><div class="sp-module-content"><ul class="nav menu"> <li class="item-161 deeper parent"><a href="/about" > About us</a><span class="offcanvas-menu-toggler collapsed" data-toggle="collapse" data-target="#collapse-menu-161"><i class="open-icon fa fa-angle-down"></i><i class="close-icon fa fa-angle-up"></i></span><ul class="collapse" id="collapse-menu-161"><li class="item-880"><a href="/history" > History</a></li><li class="item-3490"><a href="/partners" > Our Partners</a></li><li class="item-332"><a href="/membership" > Membership</a></li><li class="item-3491"><a href="/service-region" > Our Service Region</a></li><li class="item-2627"><a href="/agmm" > AGMM</a></li><li class="item-1437"><a href="/membership/cost" > Fees Schedule</a></li><li class="item-808"><a href="/governance" > Governance</a></li><li class="item-809"><a href="/stats" > Statistics</a></li><li class="item-334"><a href="/corporate-documents" > Corporate Documents</a></li><li class="item-335"><a href="/team" > Our Team</a></li><li class="item-336"><a href="/contact" > Contact us</a></li></ul></li><li class="item-829 alias-parent-active deeper parent"><a href="/our-work" > Our Work</a><span class="offcanvas-menu-toggler collapsed" data-toggle="collapse" data-target="#collapse-menu-829"><i class="open-icon fa fa-angle-down"></i><i class="close-icon fa fa-angle-up"></i></span><ul class="collapse" id="collapse-menu-829"><li class="item-520"><a href="/membership" > Membership Services</a></li><li class="item-518"><a href="/resources" > Internet Number Resources Management</a></li><li class="item-3685"><a href="/reverse-dns" > Reverse DNS</a></li><li class="item-517"><a href="/whois" > WHOIS</a></li><li class="item-1775"><a href="/membership/cost" > Fees Schedule</a></li><li class="item-674"><a href="/internet-routing-registry" > Internet Routing Registry (IRR)</a></li><li class="item-675 current active"><a href="/dnssec" > DNSSEC Program</a></li><li class="item-677"><a href="/resource-certification" > Resource Certification Program (RPKI)</a></li><li class="item-521"><a href="/corporate-documents" > Corporate Documents</a></li><li class="item-522"><a href="http://learn.afrinic.net/" target="_blank" > Training Services</a></li><li class="item-730"><a href="/support" > Support & FAQs</a></li><li class="item-2794"><a href="/changelog" > Online Services Changelog</a></li><li class="item-672"><a href="/dns-support" > DNS Support Program</a></li><li class="item-678"><a href="/root-server-copy" > Root Server Copy Program</a></li><li class="item-3695"><a href="/internet-development-programs" > Internet Development Programs</a></li></ul></li><li class="item-163 deeper parent"><a href="/participate" > Participate</a><span class="offcanvas-menu-toggler collapsed" data-toggle="collapse" data-target="#collapse-menu-163"><i class="open-icon fa fa-angle-down"></i><i class="close-icon fa fa-angle-up"></i></span><ul class="collapse" id="collapse-menu-163"><li class="item-602"><a href="/code" > Code of Conduct</a></li><li class="item-603"><a href="/email" > Email & Mailing Lists</a></li><li class="item-604"><a href="/policy" > Policy Development</a></li><li class="item-3382"><a href="/committees/afgwg" > Governments</a></li><li class="item-605"><a href="/committees" > Committees</a></li><li class="item-606"><a href="/election-process" > Elections</a></li><li class="item-607"><a href="/exhaustion" > IPv4 Exhaustion</a></li><li class="item-608"><a href="/internet-governance" > Internet Governance</a></li><li class="item-2239"><a href="/privacy" > Privacy</a></li></ul></li><li class="item-164 deeper parent"><a href="/events" > Events</a><span class="offcanvas-menu-toggler collapsed" data-toggle="collapse" data-target="#collapse-menu-164"><i class="open-icon fa fa-angle-down"></i><i class="close-icon fa fa-angle-up"></i></span><ul class="collapse" id="collapse-menu-164"><li class="item-700"><a href="https://meeting.afrinic.net" target="_blank" > Meetings</a></li><li class="item-701"><a href="/events/sponsorship" > Sponsorship Opportunities</a></li><li class="item-802"><a href="/events/hosting-guide" > Hosting Guide</a></li><li class="item-703"><a href="http://learn.afrinic.net/events" target="_blank" > Training Workshops</a></li><li class="item-938"><a href="/outreach" > Outreach</a></li><li class="item-3673"><a href="/events/webinar-series" > Webinar Series</a></li></ul></li><li class="item-756 deeper parent"><a href="/news" > Media</a><span class="offcanvas-menu-toggler collapsed" data-toggle="collapse" data-target="#collapse-menu-756"><i class="open-icon fa fa-angle-down"></i><i class="close-icon fa fa-angle-up"></i></span><ul class="collapse" id="collapse-menu-756"><li class="item-757"><a href="/news" > News</a></li><li class="item-758"><a href="/press" > Press Releases</a></li><li class="item-759"><a href="/presentations" > Presentations</a></li><li class="item-761"><a href="/factsheets" > Factsheets</a></li><li class="item-947"><a href="/newsletter" > Newsletter</a></li><li class="item-2636"><a href="/branding" > Branding</a></li><li class="item-3377"><a href="/post-guidelines" > Contribution Guidelines</a></li></ul></li><li class="item-3734"><a href="https://blog.iso.afrinic.net/" > Blog</a></li></ul> </div></div> </div>  </div>   <script> function autoDetect() { var current_language = document.querySelector('html').getAttribute("lang") if(current_language == "*" || !current_language) current_language = 'en'; var accept_language = navigator.language.toLowerCase() || navigator.userLanguage.toLowerCase(); switch(accept_language) { case 'zh-cn': case 'zh': var preferred_language = 'zh-CN'; break; case 'zh-tw': case 'zh-hk': var preferred_language = 'zh-TW'; break; default: var preferred_language = accept_language.substr(0, 2); break; } var lg_flag = document.querySelector(".sp-module-content .notranslate option[onclick*='en|"+ preferred_language +"']"); var expiryDate = new Date(); expiryDate.setMonth(expiryDate.getMonth() + 1); if(preferred_language != current_language && lg_flag && document.cookie.match('gt_auto_switch') == null ) { document.cookie = 'gt_auto_switch=1; expires='+ expiryDate.toGMTString() +'; path=/;'; doGTranslate('en|'+preferred_language); } } autoDetect(); </script>  <script> var default_language = "en"; function switch_active_language(){ var current_lang = document.querySelector('html').getAttribute('lang') || default_language; if(current_lang == "en-gb") current_lang = "en"; var select_query = document.querySelector('#sp-top1 select option[value="en|'+ current_lang +'"]'); if(select_query) select_query.setAttribute("selected", "selected"); } //Change selected to current language jQuery(document).ready(function() { switch_active_language(); }); </script>  <button id="ot-sdk-btn" class="ot-sdk-show-settings">Cookie聽Settings</button>    <a href="javascript:void(0)" class="scrollup"> </a>  <script type="text/javascript"> var _paq = _paq || []; /* tracker methods like "setCustomDimension" should be called before "trackPageView" */ _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="https://analytics.afrinic.net/"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', '2']); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> <noscript><p><img src="https://analytics.afrinic.net/piwik.php?idsite=2&rec=1" style="border:0;" alt="" /></p></noscript> </body> </html>