https://labs.ripe.net/author/qasim-lone/detecting-dns-root-manipulation/