Botched upgrade results in an invalid .is zone

An invalid .is zone was dstributed to the .is secondary servers at 14:43 today. Due to a botched server upgrade the DNSSEC signatures on the .is zone were invalid.  The problem was resolved by 15:20. This resulted in some validating-resolvers being unable to resolve .is names during this period.