diff --git a/daemon/cachedump.c b/daemon/cachedump.c
index 8992e6cb8..81061870b 100644
--- a/daemon/cachedump.c
+++ b/daemon/cachedump.c
@@ -79,6 +79,7 @@ dump_rrset(SSL* ssl, struct ub_packed_rrset_key* k,
 	size_t i;
 	/* rd lock held by caller */
 	if(!k || !d) return 1;
+	if(k->id == 0) return 1; /* deleted */
 	if(d->ttl < now) return 1; /* expired */
 
 	/* meta line */
diff --git a/doc/Changelog b/doc/Changelog
index 0521608b3..c1d822fc9 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -4,6 +4,7 @@
 	- Fix validation for CNAME loops.  When it detects a cname loop,
 	  by finding the cname, cname in the existing list, it returns
 	  the partial result with the validation result up to then.
+	- more robust cachedump rrset routine.
 
 19 February 2018: Wouter
 	- Fix #3505: Documentation for default local zones references