I dug into the DNSSEC rabbit hole a few weeks ago and got drawn into the fascinating root key signing ceremony.

https://www.iana.org/dnssec/ceremonies/62

I knew of GPG key signing parties, but never anything at this scale or impact. Might try booting the "Signing Computer Operating System Image Release coen-2.0.1" ISO in a VM and checking it out.