diff --git a/bin/dnssec/dnssec-keygen.8 b/bin/dnssec/dnssec-keygen.8
index 5b5288af5d..7801c094a0 100644
--- a/bin/dnssec/dnssec-keygen.8
+++ b/bin/dnssec/dnssec-keygen.8
@@ -13,7 +13,7 @@
 .\" NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
 .\" WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.\" $Id: dnssec-keygen.8,v 1.8 2000/11/01 00:33:47 bwelling Exp $
+.\" $Id: dnssec-keygen.8,v 1.9 2000/11/10 18:03:05 gson Exp $
 .\"
 .Dd Jun 30, 2000
 .Dt DNSSEC-KEYGEN 8
@@ -85,7 +85,7 @@ argument following the
 .Fl b
 option.
 The choice of key size depends on the algorithm that is used.
-RSA keys must be between 512 and 2048 bits.
+RSA keys must be between 512 and 2000 bits.
 Diffie-Hellman keys must be between 128 and 4096 bits.
 For DSA, the key size must be between 512 and 1024 bits and a multiple
 of 64.
diff --git a/doc/man/dnssec/dnssec-keygen.8 b/doc/man/dnssec/dnssec-keygen.8
index 5b5288af5d..7801c094a0 100644
--- a/doc/man/dnssec/dnssec-keygen.8
+++ b/doc/man/dnssec/dnssec-keygen.8
@@ -13,7 +13,7 @@
 .\" NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
 .\" WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.\" $Id: dnssec-keygen.8,v 1.8 2000/11/01 00:33:47 bwelling Exp $
+.\" $Id: dnssec-keygen.8,v 1.9 2000/11/10 18:03:05 gson Exp $
 .\"
 .Dd Jun 30, 2000
 .Dt DNSSEC-KEYGEN 8
@@ -85,7 +85,7 @@ argument following the
 .Fl b
 option.
 The choice of key size depends on the algorithm that is used.
-RSA keys must be between 512 and 2048 bits.
+RSA keys must be between 512 and 2000 bits.
 Diffie-Hellman keys must be between 128 and 4096 bits.
 For DSA, the key size must be between 512 and 1024 bits and a multiple
 of 64.