RRSIG

The DNS record (glossary)DNS record One entry in a DNS zone, made of a name, a type, a TTL and data. Full definition of DNS record that carries a DNSSEC (glossary)DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC digital signature. Each set of records in a signed zone has at least one, made with the zone's private key. Signatures have an expiry date, so they must be renewed regularly. Expired signatures are a common cause of DNSSEC outages.