Resolved after 17 hours 8 minutes, affecting DNS Root Servers and Recursive DNS, on May 5, 2026.
We have removed our mitigations and we are monitoring the results.
Affected components
Update timeline
- investigating May 05, 2026, 09:17 PM UTC
We are observing issues with authoritative resolution for the .de TLD.
- identified May 05, 2026, 09:20 PM UTC
The issue has been identified and a fix is being implemented.
- identified May 05, 2026, 10:01 PM UTC
We are continuing to work on a fix for this issue.
- identified May 05, 2026, 10:07 PM UTC
We are continuing to work on a fix for this issue.
- identified May 05, 2026, 10:14 PM UTC
We are continuing to work on a fix for this issue.
- monitoring May 05, 2026, 10:37 PM UTC
The issue has been identified as a DNSSEC signing problem at DENIC, the organization responsible for the .DE top-level domain. Cloudflare has temporarily disabled DNSSEC validation on 1.1.1.1 resolver in order to allow .DE names to continue to resolve. DNSSEC validation will be re-enabled when the signing problems at DENIC are known to have been resolved.
- monitoring May 06, 2026, 12:40 PM UTC
We have removed our mitigations and we are monitoring the results.
- resolved May 06, 2026, 03:09 PM UTC
This incident has been resolved.
Your product runs on more than Cloudflare
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services