Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2026-05-05 21:40:25 UTC

Analyzing DNSSEC problems for nic.de

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
DS=38696/SHA-256 verifies DNSKEY=38696/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
de
Found 1 DS records for de in the . zone
DS=26755/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
Unknown host z.nic.de
Found 3 DNSKEY records for de
DS=26755/SHA-256 verifies DNSKEY=26755/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
Unknown host f.nic.de
Unknown host a.nic.de
nic.de
Unknown host l.de.net
Found 1 DS records for nic.de in the de zone
DS=26155/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=33834 and DNSKEY=33834 does not verify the DS RRset (signature verification failed)
The DS RRset was not signed by any trusted keys
Unknown host ns4.denic.net
Unknown host ns3.denic.de
Unknown host ns1.denic.de
Unknown host ns2.denic.de
Failed to get DNSKEY RR set for zone nic.de
No response from nic.de nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nic.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options