The Netherlands (.nl) is now signed with RSASHA256, NSEC3 opt-out (key tag 38420) I assume it is still in a testing phase, as I'm not aware of being able to submit DNSKEYs or DS records. And I find no press release at www.sidn.nl :) Paul