> The next KSK key roll is underway as of May 2026.
Oh, so that's likely what DENIC screwed up colossally a few days ago.
Authoritative zones are not concerned with the DNSKEYs of their parent zones, so I doubt that's the reason. Root zone key rollovers are only really important for resolvers.
This reminds me of a problem we hit at work. Ended up going a different direction but same root issue.