[dns-operations] DNSKEY RRSIGs expired on xn--3bst00m & xn--6qq986b3xl

[Stephane Bortzmeyer]

On Thu, Apr 10, 2014 at 07:48:09PM +0100,
 Chris Thompson <cet1 at cam.ac.uk> wrote 
 a message of 23 lines which said:

> The signatures on the DNSKEY RRsets for two of the new generic TLDs have
> expired 

I seize the opportunity to recommend an automatic monitoring of
signature expiration (of course, we all do it already) and to suggest,
for those who use a Nagios-compatible system (like Icinga),
the excellent Perl script by Duane Wessels
<http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html>