ICANN has slated the DNSSEC Key Sigining Key Rollover for 2017/10/11. It is highly recommended to update your systems with the new key prior to the key signing key rollover date. Examine - if you will - the ICANN Root Zone KSK Rollover site for additional detail. In the meantime, enjoy Punky Duero's outstanding NANONG DNSSEC KSK Rollover Lighting Talk from the NANOG June 2017 confab.