the dnssec of distfiles.gentoo.org is broken atm. An dnssec enabled bind don't resolv distfiles anymore. Please see: http://dnsviz.net/d/distfiles.gentoo.org/dnssec/ Please correct this.
resolved