The Root Zone MaintainerNarrow moat
VeriSign (VRSN) — moat facet
VeriSign edits the file that tells the internet where every top-level domain lives, for free, and would be extremely awkward to remove from it.
Above every top-level domain sits one file, and VeriSign edits it.
The root zone contains the authoritative pointers to every TLD on the internet: where .com lives, where .de lives, where .xyz lives. VeriSign performs the Root Zone Maintainer function under an agreement with ICANN, and separately operates two of the thirteen root servers that serve that data.1
The commercial value of this is approximately zero. It is not a revenue line, it is not disclosed separately, and it cannot be priced up. The strategic value is that it puts VeriSign a level above its own market. A registry operator is a vendor with a contract. The Root Zone Maintainer is a piece of the internet's constitutional plumbing.
The role also carries total downside and no upside. Nothing good happens to VeriSign because the root zone works; a great many bad things happen if it does not, and none of them would be confined to .com. It is the clearest example in this company of a responsibility taken for reasons that do not appear in the income statement.
There is a governance angle worth noting. The arrangement dates from the era when U.S. stewardship of the DNS was explicit, and survived the 2016 transition of IANA functions to the multistakeholder community. That it survived is itself evidence about how the institutions view the incumbent.
The Root Zone Maintainer function has survived the 2016 IANA transition and every governance review since, generating no revenue and no controversy. It neither grows nor shrinks; it simply continues, which is the entire point of it.
VeriSign performs the Root Zone Maintainer function under an agreement with ICANN and operates two of the thirteen global internet root servers holding the authoritative data at the top of the DNS hierarchy. Neither generates meaningful revenue. Both make VeriSign awkward to describe as a mere vendor, which is worth something in a renewal discussion and nothing on the income statement.
Source: VeriSign Form 10-K, FY2025 ↗- ReportedVeriSign performs the Root Zone Maintainer function under an agreement with ICANN and operates two of the thirteen global internet root servers holding the authoritative data at the top of the DNS.VeriSign, Inc., Form 10-K for the fiscal year ended 31 December 2025 (SEC, CIK 1014473) — Item 1, Business. VeriSign operates the .com and .net registries under registry agreements with ICANN, and .com additionally under a Cooperative Agreement with the U.S. Department of Commerce (most recently amended by Amendment 35 on 26 October 2018, automatically renewed on the same terms on 30 November 2024 for a successive six-year term, renewing again on 30 November 2030 unless the DOC gives notice). The .com Registry Agreement runs a six-year term that must be renewed or extended by 30 November 2030 and contains a presumptive right of renewal, with ICANN able to terminate or refuse in certain prescribed circumstances; it permits an increase to the Maximum Price of up to 7% over the previous year in each of the final four years of each six-year period, the current period having begun on 26 October 2024. The .net Registry Agreement was renewed on 29 June 2023, runs to 1 July 2029 and permits increases of up to 10% each year. VeriSign remits $0.2575 to ICANN quarterly for each annual .com registration and $0.25 for each .name registration. It also operates .cc under an agreement with the Cocos (Keeling) Islands, operates .name and internationalised gTLDs, provides back-end services for .edu, performs the Root Zone Maintainer function for ICANN and operates two of the thirteen global internet root servers. Retail pricing is established by registrars; VeriSign must provide ICANN-accredited registrars with non-discriminatory access, faces marketing and bundling limits, must submit new Registry Services for ICANN review, and is subject to vertical-integration restrictions that apply solely to .com — obligations it states do not apply to ccTLDs and other gTLDs and may create a competitive disadvantage. Named registry competitors include CentralNic, China Internet Network Information Center (CNNIC), DENIC eG, GoDaddy, Google, Identity Digital, Nominet, Public Interest Registry, Radix and .xyz. Employee headcount 928 (256 cost of revenues, 240 research and development, 432 selling, general and administrative). — FY2025 · publ. 2026-02-05 · source ↗