DS record

Delegation Signer: a hash of the child zone's key, published in the parent, that links the DNSSEC chain of trust across a delegation.