ACSP Suggestion 2026.1: Add Support for DNSSEC DS Records to be Automatically Updated.

Suggestion

Author: Brandon Applegate   
Submitted On: 07 January 2026

Description:

Add support for DNSSEC DS records to be automatically updated. This is covered in RFCs 7344/8078/9615. This project tracks orgs that support this already:

https://github.com/oskar456/cds-updates

Value to Community: Enables fully automatic key rollovers, no need to use ARIN Web interface to manually update DS records.

Timeframe: Not specified

Status: Closed   Updated: 21 January 2026

Tracking Information

ARIN Comment

21 January 2026

Thank you for your suggestion, numbered 2026.1 upon confirmed receipt, requesting that ARIN add support for DNSSEC Delegation Signer (DS) records to be automatically updated.

We agree that this would be a beneficial improvement, noting that it will require development effort to add this capability to our provisioning system. We will add it to our list of service improvements pending prioritization.

Your suggestion has been referred to our internal process for prioritization and implementation planning and is now closed. Thank you for participating in ARIN’s Consultation and Suggestion Process.

Thank you for participating in ARIN’s Consultation and Suggestion Process.

Regards,

American Registry for Internet Numbers (ARIN)