diff --git a/bind9.18.spec b/bind9.18.spec
index b029c79..bfb17b3 100644
--- a/bind9.18.spec
+++ b/bind9.18.spec
@@ -410,6 +410,9 @@ for i in bin/named/Makefile.am; do
 done
 %endif
 
+install -m 644 -p %{SOURCE27} bind.keys
+# Ensure build-in keys are regenerated
+rm -f bind.keys.h
 :;
 
 
@@ -699,10 +702,10 @@ cp -p build/doc/arm/_build/latex/Bv9ARM.pdf ${RPM_BUILD_ROOT}%{_pkgdocdir}
 touch ${RPM_BUILD_ROOT}%{_localstatedir}/log/named.log
 
 # configuration files:
-install -m 640 %{SOURCE16} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
+install -m 640 %{SOURCE16} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.conf
 touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.{key,conf}
-install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
-install -m 644 %{SOURCE36} ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
+install -m 644 %{SOURCE27} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named.root.key
+install -m 644 %{SOURCE36} -p ${RPM_BUILD_ROOT}%{_sysconfdir}/trusted-key.key
 mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/named
 mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/named
 install -p -m 644 %{SOURCE17} ${RPM_BUILD_ROOT}%{_datadir}/named/named.ca
@@ -1040,6 +1043,7 @@ fi;
 %changelog
 * Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-26
 - Add new root key 38696 into package files (RHEL-131887)
+- Update built-in anchors in delv and named
 
 * Thu Aug 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-25
 - Remove downstream introduced double-free (CVE-2026-5950)