And finally, after so many years miek.nl can be DNSSEC validated from the root down. Check it yourself.