DNSSEC Debugger - hotmann.de

Domain Name:

Time: 2025-11-08 09:23:53 UTC

Analyzing DNSSEC problems for hotmann.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 44895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251121000000 20251031000000 20326 . qnzPUNeV8plQe0Se5Fa0uHS0Ygf4DSnEekaMeH7GQRbNhk6ntkneJFKUN+EBJQfd/JoaY//18qf4 G6YrWE/a+FwJ5oefafEhuJWhITrXMle9e4oy4Z7sjb7e1ajwGSKlcfp0Rsulv/aPlLLfl+4jUijr zzZUvUJA10LzOwswvjI16xA3HMG9rEh0mKY0RywLI+R5NkYgDzY0QGL9BMaUHWNV+eTFBmMpmg3j jKGnIg8jmFhqcypUqLXW7md/oO+k0A8QG39nGvhx7rVDUoaQd7atJH2jtzGeXW8n/XI/ncI9fSoX rLXu6NvJY5bX6dXI9ypg+sFnkF7Fd4TdZ8AasA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to a.root-servers.net for hotmann.de/A
	Received 744 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 744 octets ;; HEADER SECTION ;; id = 34454 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS n.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20251121050000 20251108040000 61809 . CzWOkp3MaR154EjnUEva4ldsQkgA9122axuabnwjmY70J6kXRPsfYxToMEN1tfb60ICAzmVf9WhS BRZbTmI/A8BSd8ViTVbW5S7ukgdQ5XFsX0YAUrTTkWqFJ7ZMUrYeOyua1PEWN1rPRQPnriNVfqwx WOazfaYo8AuMBhg0fv86GmWzpOhGT7ldDTkX4NjAf6f793UoROh/nU2uikKxhQbMG+U0bCRWRMUP qYkjSVp816i9S77kl8OHXNyNB7eZpg8h5e6DlZqIPrPYnbp46+0H3U4X4aKQyqGFUQgCCpMMdZLq K+fOL3fgMwubG87TvlEmtOM8KswmN0mqyni0Tw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for de/DNSKEY
	Received 736 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 736 octets ;; HEADER SECTION ;; id = 28971 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS n.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20251121050000 20251108040000 61809 . CzWOkp3MaR154EjnUEva4ldsQkgA9122axuabnwjmY70J6kXRPsfYxToMEN1tfb60ICAzmVf9WhS BRZbTmI/A8BSd8ViTVbW5S7ukgdQ5XFsX0YAUrTTkWqFJ7ZMUrYeOyua1PEWN1rPRQPnriNVfqwx WOazfaYo8AuMBhg0fv86GmWzpOhGT7ldDTkX4NjAf6f793UoROh/nU2uikKxhQbMG+U0bCRWRMUP qYkjSVp816i9S77kl8OHXNyNB7eZpg8h5e6DlZqIPrPYnbp46+0H3U4X4aKQyqGFUQgCCpMMdZLq K+fOL3fgMwubG87TvlEmtOM8KswmN0mqyni0Tw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to m.root-servers.net for de/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 366 octets ;; HEADER SECTION ;; id = 46188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20251121050000 20251108040000 61809 . CzWOkp3MaR154EjnUEva4ldsQkgA9122axuabnwjmY70J6kXRPsfYxToMEN1tfb60ICAzmVf9WhS BRZbTmI/A8BSd8ViTVbW5S7ukgdQ5XFsX0YAUrTTkWqFJ7ZMUrYeOyua1PEWN1rPRQPnriNVfqwx WOazfaYo8AuMBhg0fv86GmWzpOhGT7ldDTkX4NjAf6f793UoROh/nU2uikKxhQbMG+U0bCRWRMUP qYkjSVp816i9S77kl8OHXNyNB7eZpg8h5e6DlZqIPrPYnbp46+0H3U4X4aKQyqGFUQgCCpMMdZLq K+fOL3fgMwubG87TvlEmtOM8KswmN0mqyni0Tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20251121050000 20251108040000 61809 . CzWOkp3MaR154EjnUEva4ldsQkgA9122axuabnwjmY70J6kXRPsfYxToMEN1tfb60ICAzmVf9WhS BRZbTmI/A8BSd8ViTVbW5S7ukgdQ5XFsX0YAUrTTkWqFJ7ZMUrYeOyua1PEWN1rPRQPnriNVfqwx WOazfaYo8AuMBhg0fv86GmWzpOhGT7ldDTkX4NjAf6f793UoROh/nU2uikKxhQbMG+U0bCRWRMUP qYkjSVp816i9S77kl8OHXNyNB7eZpg8h5e6DlZqIPrPYnbp46+0H3U4X4aKQyqGFUQgCCpMMdZLq K+fOL3fgMwubG87TvlEmtOM8KswmN0mqyni0Tw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to s.de.net for de/DNSKEY
	Received 745 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 745 octets ;; HEADER SECTION ;; id = 60143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAcEVb8NXd3aC9Q2B3NboNqHBpIkGBmYpPlCVWZxmX0r5bdP5xaEq2XOyWluw/A5FIF1Awylx cRruhtsiAwwzygcO92E/mTvr10nJusTzB/yS9jJqy5WEjxKflrs16DOBWpBY9IH3duLWwP8N74DC SaI1GCL16EXuxZ9gVuBkbbMP ) ; keytag 9783 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251119230608 20251105213608 26755 de. cHvfojOJZqaADtGIgdB5XctycnDnrHzcO6nqbX3GuxLoasjytSnhh8JrlWqFEQHFEI/pi+Kq4hcr BhBkULmeEBIy/ciQhTA2W79FWnDed7QHKN/1bQIWS8bQ08xDpJyUO76r77QAO5nAf+XTmCTeNVAl GrfO0RV1QChK3+rdcqUi1rtJyS2W7q8DqTWJmT/CVVv0MlM0ukAZ66R4gTIJXQNv/eGpTqe6PlPC 4JN0R3Dcv3p+YF8CaFwpkorltadtEaMArYmI4kV1hfdWQ1xPDPUGmllqJ2LLvzWBI7xtR0l9o7sr fZJvj+s6BYzncJUnF80agCXCNYiubue1JERCGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcEVb8NXd3aC9Q2B3NboNqHBpIkGBmYpPlCVWZxmX0r5bdP5xaEq2XOyWluw/A5FIF1Awylx cRruhtsiAwwzygcO92E/mTvr10nJusTzB/yS9jJqy5WEjxKflrs16DOBWpBY9IH3duLWwP8N74DC SaI1GCL16EXuxZ9gVuBkbbMP ) ; keytag 9783`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20251119230608 20251105213608 26755 de. cHvfojOJZqaADtGIgdB5XctycnDnrHzcO6nqbX3GuxLoasjytSnhh8JrlWqFEQHFEI/pi+Kq4hcr BhBkULmeEBIy/ciQhTA2W79FWnDed7QHKN/1bQIWS8bQ08xDpJyUO76r77QAO5nAf+XTmCTeNVAl GrfO0RV1QChK3+rdcqUi1rtJyS2W7q8DqTWJmT/CVVv0MlM0ukAZ66R4gTIJXQNv/eGpTqe6PlPC 4JN0R3Dcv3p+YF8CaFwpkorltadtEaMArYmI4kV1hfdWQ1xPDPUGmllqJ2LLvzWBI7xtR0l9o7sr fZJvj+s6BYzncJUnF80agCXCNYiubue1JERCGQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=9783 is now in the chain-of-trust
	Query to n.de.net for hotmann.de/A
	Received 593 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 593 octets ;; HEADER SECTION ;; id = 57176 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) hotmann.de. 86400 IN NS rita.ns.cloudflare.com. hotmann.de. 86400 IN NS theo.ns.cloudflare.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20251121051916 20251107034916 9783 de. tLfGFFW06Ma14zvKNYZUG8CHQadr2YQto8AtQsZLHpbG8Py7b6sC8O8t76RDNc1HvH4mBk3CXALF nZf8CW8CGnOc/4r7GQr1EkUtPW+O2v/TZ92y5RTg3ekuX+3QfTGP+sBUPsT5m2XfkgIQxxttfGYZ QsckZQQaxVn1Y6wm4ZY= ) claprg49c0s1haq0da231fui80ja95ra.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a claqc9ee2i9vsjku6gm87vo5fies6ocd A RRSIG ) claprg49c0s1haq0da231fui80ja95ra.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20251121062717 20251107045717 9783 de. JtCr95Lqfa2crtCKeZcWXWPukhmx0XzGhMLnkb1fvZgFPhCjxPqD+ax2yV3dB1YcbfnIMj4OZjE1 3nz0lnY5N4c1f7ppk4XEf1nacaVWo6MHjgDFxhRuh+Jih2INZ4uWkiYUCGkdZvO3LYf/gdNcWXHS HxdjF80/rEHfo7hME50= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n.de.net for hotmann.de/DNSKEY
	Received 593 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 593 octets ;; HEADER SECTION ;; id = 62693 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) hotmann.de. 86400 IN NS rita.ns.cloudflare.com. hotmann.de. 86400 IN NS theo.ns.cloudflare.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20251121051916 20251107034916 9783 de. tLfGFFW06Ma14zvKNYZUG8CHQadr2YQto8AtQsZLHpbG8Py7b6sC8O8t76RDNc1HvH4mBk3CXALF nZf8CW8CGnOc/4r7GQr1EkUtPW+O2v/TZ92y5RTg3ekuX+3QfTGP+sBUPsT5m2XfkgIQxxttfGYZ QsckZQQaxVn1Y6wm4ZY= ) claprg49c0s1haq0da231fui80ja95ra.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a claqc9ee2i9vsjku6gm87vo5fies6ocd A RRSIG ) claprg49c0s1haq0da231fui80ja95ra.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20251121062717 20251107045717 9783 de. JtCr95Lqfa2crtCKeZcWXWPukhmx0XzGhMLnkb1fvZgFPhCjxPqD+ax2yV3dB1YcbfnIMj4OZjE1 3nz0lnY5N4c1f7ppk4XEf1nacaVWo6MHjgDFxhRuh+Jih2INZ4uWkiYUCGkdZvO3LYf/gdNcWXHS HxdjF80/rEHfo7hME50= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone hotmann.de

hotmann.de

	Checking DS between de and hotmann.de
	Query to f.nic.de for hotmann.de/DS
	Received 763 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 763 octets ;; HEADER SECTION ;; id = 16969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) de. 7200 IN SOA ( f.nic.de. dns-operations.denic.de. 1762593681 ;serial 7200 ;refresh 7200 ;retry 3600000 ;expire 7200 ;minimum ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) claprg49c0s1haq0da231fui80ja95ra.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a claqc9ee2i9vsjku6gm87vo5fies6ocd A RRSIG ) de. 7200 IN RRSIG ( SOA 8 1 86400 20251122092117 20251108075117 9783 de. NwvpiHmoZYhxrxdOoFE1sPR5SpB1qwtzHJCvoYo4tBO/i9MZEZvdorE+VelbAcGoB78gJxzS2PEp 7E28MpSZPitCvdK/A2o7B88pe7dubQvxqXRgJXoQdqZYuW4dP7tTv11LHa+J+bl2CJ8djdovz1H8 6iYD0/Hud67GdMoGt6g= ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20251121051916 20251107034916 9783 de. tLfGFFW06Ma14zvKNYZUG8CHQadr2YQto8AtQsZLHpbG8Py7b6sC8O8t76RDNc1HvH4mBk3CXALF nZf8CW8CGnOc/4r7GQr1EkUtPW+O2v/TZ92y5RTg3ekuX+3QfTGP+sBUPsT5m2XfkgIQxxttfGYZ QsckZQQaxVn1Y6wm4ZY= ) claprg49c0s1haq0da231fui80ja95ra.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20251121062717 20251107045717 9783 de. JtCr95Lqfa2crtCKeZcWXWPukhmx0XzGhMLnkb1fvZgFPhCjxPqD+ax2yV3dB1YcbfnIMj4OZjE1 3nz0lnY5N4c1f7ppk4XEf1nacaVWo6MHjgDFxhRuh+Jih2INZ4uWkiYUCGkdZvO3LYf/gdNcWXHS HxdjF80/rEHfo7hME50= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for hotmann.de in the de zone
	Query to theo.ns.cloudflare.com for hotmann.de/DNSKEY
	Received 305 bytes from 173.245.59.144
	;; Response received from [173.245.59.144] 305 octets ;; HEADER SECTION ;; id = 24645 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN DNSKEY ;; ANSWER SECTION (3 records) hotmann.de. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 hotmann.de. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 hotmann.de. 3600 IN RRSIG ( DNSKEY 13 2 3600 20251223100907 20251023100907 2371 hotmann.de. 5czpKMZtkZGGyEZRoEZ2QAzzsj5V9wGOW9nrRLLcCOUo6JzrRiXwLTIzPX6eFd6fXzSKqiGiaiQK RWjXbV/uzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for hotmann.de
	`hotmann.de. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`hotmann.de. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`hotmann.de. 3600 IN RRSIG ( DNSKEY 13 2 3600 20251223100907 20251023100907 2371 hotmann.de. 5czpKMZtkZGGyEZRoEZ2QAzzsj5V9wGOW9nrRLLcCOUo6JzrRiXwLTIzPX6eFd6fXzSKqiGiaiQK RWjXbV/uzA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to theo.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 172.64.33.144
	;; Response received from [172.64.33.144] 177 octets ;; HEADER SECTION ;; id = 572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20251109102354 20251107082354 34505 hotmann.de. ZQPlb3G6AWOT5ktc7nNS+T2Hotl/wMs9ZL9taYxnexunewesEe2n3Ulm4vsSvm8zvyyGLDwOWxRE C9aFVhko7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	theo.ns.cloudflare.com is authoritative for hotmann.de
	Found RRSIG signed by hotmann.de zone
	Query to rita.ns.cloudflare.com for hotmann.de/SOA
	Received 207 bytes from 172.64.32.140
	;; Response received from [172.64.32.140] 207 octets ;; HEADER SECTION ;; id = 17502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN SOA ;; ANSWER SECTION (2 records) hotmann.de. 1800 IN SOA ( rita.ns.cloudflare.com. dns.cloudflare.com. 2387953315 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) hotmann.de. 1800 IN RRSIG ( SOA 13 2 1800 20251109102354 20251107082354 34505 hotmann.de. GYGEqyHXprddeX2eqzPE/UoEElhy4dX63Ojtl+OlRhN/i/6YhRgnC/PmUR5Ve8EFOA0y9umqNnPW JxofvjijZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to theo.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 108.162.193.144
	;; Response received from [108.162.193.144] 177 octets ;; HEADER SECTION ;; id = 50871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20251109102354 20251107082354 34505 hotmann.de. TnYWbjKiwzWOvP97yyzvUy+Y5VcnePc1inOeDxcTXg2GeBirkqoEEUF9IhOgjpztWS9QZtWw4Bfd mv+AsnDPxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	hotmann.de A RR has value 104.18.21.149
	hotmann.de A RR has value 104.18.20.149
	Found 1 RRSIGs over A RRset
	`hotmann.de. 300 IN RRSIG ( A 13 2 300 20251109102354 20251107082354 34505 hotmann.de. TnYWbjKiwzWOvP97yyzvUy+Y5VcnePc1inOeDxcTXg2GeBirkqoEEUF9IhOgjpztWS9QZtWw4Bfd mv+AsnDPxQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

hotmann.de

	Query to rita.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 172.64.32.140
	;; Response received from [172.64.32.140] 177 octets ;; HEADER SECTION ;; id = 10628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20251109102354 20251107082354 34505 hotmann.de. nPlTwjMGZi5/mxYgcz8xbXbyGmeU2fPGgfoLnMzLwTgpaiWs0S50ONxd2IBPbrnbJK0Z1OOuJ9Ib WrC4Whaciw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rita.ns.cloudflare.com is authoritative for hotmann.de
	Found RRSIG signed by hotmann.de zone
	Query to rita.ns.cloudflare.com for hotmann.de/A
	Received 177 bytes from 173.245.58.140
	;; Response received from [173.245.58.140] 177 octets ;; HEADER SECTION ;; id = 63124 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; hotmann.de. IN A ;; ANSWER SECTION (3 records) hotmann.de. 300 IN A 104.18.21.149 hotmann.de. 300 IN A 104.18.20.149 hotmann.de. 300 IN RRSIG ( A 13 2 300 20251109102354 20251107082354 34505 hotmann.de. +/imupGcKZY5sx6GQ6Lidg8NzLmvjcfbjVZCQ3aozEF7MyxEpLT+v0oMw3fTWXecKobumcnqoDF0 7GUyZIo7Ow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	hotmann.de A RR has value 104.18.21.149
	hotmann.de A RR has value 104.18.20.149
	Found 1 RRSIGs over A RRset
	`hotmann.de. 300 IN RRSIG ( A 13 2 300 20251109102354 20251107082354 34505 hotmann.de. +/imupGcKZY5sx6GQ6Lidg8NzLmvjcfbjVZCQ3aozEF7MyxEpLT+v0oMw3fTWXecKobumcnqoDF0 7GUyZIo7Ow== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hotmann.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: