All services are affected by a major DNS outage.
It seems like DNSSEC key rotations happened sooner than expected: the
rotation was planned for November 2025, and it happened today,
breaking DNS resolution for all torproject.org domains around
2025-09-20 17:40:10UTC.
Keys were updated in the .org registry at around 19:32UTC. With the
one hour time-to-live record on .org DS records, we expect this
outage will be fully resolved by 20:32UTC.
The .net domains have a much longer time to live (a full day), and
we believe this lessened the impact of the outage on that domain. The
DS keys were updated at 20:32UTC, which gave a window of about three
hours for the outage on that domain, for which the outage is actually
a full day, with service fully returning on 2025-09-21 20:32.
Details in the GitLab incident tpo/tpa/team#42297.