DNSSEC Debugger - tristanself.co.uk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-08 11:27:06 UTC

Analyzing DNSSEC problems for tristanself.co.uk

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1417 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1417 octets ;; HEADER SECTION ;; id = 62185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to f.root-servers.net for tristanself.co.uk/A
	Received 885 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 885 octets ;; HEADER SECTION ;; id = 16814 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260721050000 20260708040000 57780 . 0FeSMJO3s3i3f4dh1jLjrb2NuGtDXo3CX+hl8TBCQnjWfeBAMiPEHS4h9NtWgzZpkHS9lmFuTLwG xbGfgktKaU++g4I0d0VDbJEL8SDlUsC1Z7a1RQHHSEsVKXcgEDDnhrQMaDIywjx6lVuClNysYFXe ahTaVHajUvmPMom7tHY2bkbCYebVTraQqJ96+th7D2mP7O9eNSRLNYBltwJ36H8gYf5FoKLv4o64 zQZFSv3DrqIg6lUqwKLzji98kePLRQ2TO64eYEb04//oKNc6xSW4HluzGdI9s+pWeC7Mq9JNrV1N EhqKgRyiB7cHOaOUA7rN9lHTMtbT84i7HyKDjg== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN A 156.154.103.3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN A 43.230.48.1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for uk/DNSKEY
	Received 870 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 870 octets ;; HEADER SECTION ;; id = 56132 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) uk. 172800 IN NS nsa.nic.uk. uk. 172800 IN NS nsb.nic.uk. uk. 172800 IN NS nsc.nic.uk. uk. 172800 IN NS nsd.nic.uk. uk. 172800 IN NS dns1.nic.uk. uk. 172800 IN NS dns2.nic.uk. uk. 172800 IN NS dns3.nic.uk. uk. 172800 IN NS dns4.nic.uk. uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260721050000 20260708040000 57780 . 0FeSMJO3s3i3f4dh1jLjrb2NuGtDXo3CX+hl8TBCQnjWfeBAMiPEHS4h9NtWgzZpkHS9lmFuTLwG xbGfgktKaU++g4I0d0VDbJEL8SDlUsC1Z7a1RQHHSEsVKXcgEDDnhrQMaDIywjx6lVuClNysYFXe ahTaVHajUvmPMom7tHY2bkbCYebVTraQqJ96+th7D2mP7O9eNSRLNYBltwJ36H8gYf5FoKLv4o64 zQZFSv3DrqIg6lUqwKLzji98kePLRQ2TO64eYEb04//oKNc6xSW4HluzGdI9s+pWeC7Mq9JNrV1N EhqKgRyiB7cHOaOUA7rN9lHTMtbT84i7HyKDjg== ) ;; ADDITIONAL SECTION (17 records) nsa.nic.uk. 172800 IN A 156.154.100.3 nsb.nic.uk. 172800 IN A 156.154.101.3 nsc.nic.uk. 172800 IN A 156.154.102.3 nsd.nic.uk. 172800 IN A 156.154.103.3 dns1.nic.uk. 172800 IN A 213.248.216.1 dns2.nic.uk. 172800 IN A 103.49.80.1 dns3.nic.uk. 172800 IN A 213.248.220.1 dns4.nic.uk. 172800 IN A 43.230.48.1 nsa.nic.uk. 172800 IN AAAA 2001:502:ad09::3 nsb.nic.uk. 172800 IN AAAA 2001:502:2eda::3 nsc.nic.uk. 172800 IN AAAA 2610:a1:1009::3 nsd.nic.uk. 172800 IN AAAA 2610:a1:1010::3 dns1.nic.uk. 172800 IN AAAA 2a01:618:400::1 dns2.nic.uk. 172800 IN AAAA 2401:fd80:400::1 dns3.nic.uk. 172800 IN AAAA 2a01:618:404::1 dns4.nic.uk. 172800 IN AAAA 2401:fd80:404::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uk

	Checking DS between . and uk
	Query to c.root-servers.net for uk/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 366 octets ;; HEADER SECTION ;; id = 34127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DS ;; ANSWER SECTION (2 records) uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 ) uk. 86400 IN RRSIG ( DS 8 1 86400 20260721050000 20260708040000 57780 . 0FeSMJO3s3i3f4dh1jLjrb2NuGtDXo3CX+hl8TBCQnjWfeBAMiPEHS4h9NtWgzZpkHS9lmFuTLwG xbGfgktKaU++g4I0d0VDbJEL8SDlUsC1Z7a1RQHHSEsVKXcgEDDnhrQMaDIywjx6lVuClNysYFXe ahTaVHajUvmPMom7tHY2bkbCYebVTraQqJ96+th7D2mP7O9eNSRLNYBltwJ36H8gYf5FoKLv4o64 zQZFSv3DrqIg6lUqwKLzji98kePLRQ2TO64eYEb04//oKNc6xSW4HluzGdI9s+pWeC7Mq9JNrV1N EhqKgRyiB7cHOaOUA7rN9lHTMtbT84i7HyKDjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for uk in the . zone
	DS=43876/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uk. 86400 IN RRSIG ( DS 8 1 86400 20260721050000 20260708040000 57780 . 0FeSMJO3s3i3f4dh1jLjrb2NuGtDXo3CX+hl8TBCQnjWfeBAMiPEHS4h9NtWgzZpkHS9lmFuTLwG xbGfgktKaU++g4I0d0VDbJEL8SDlUsC1Z7a1RQHHSEsVKXcgEDDnhrQMaDIywjx6lVuClNysYFXe ahTaVHajUvmPMom7tHY2bkbCYebVTraQqJ96+th7D2mP7O9eNSRLNYBltwJ36H8gYf5FoKLv4o64 zQZFSv3DrqIg6lUqwKLzji98kePLRQ2TO64eYEb04//oKNc6xSW4HluzGdI9s+pWeC7Mq9JNrV1N EhqKgRyiB7cHOaOUA7rN9lHTMtbT84i7HyKDjg== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=43876/SHA-256 is now in the chain-of-trust
	`uk. 86400 IN DS ( 43876 8 2 a107ed2ac1bd14d924173bc7e827a1153582072394f9272ba37e2353bc659603 )`
	Query to nsa.nic.uk for uk/DNSKEY
	Received 745 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 745 octets ;; HEADER SECTION ;; id = 83 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uk. IN DNSKEY ;; ANSWER SECTION (3 records) uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876 uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056 uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260805192619 20260701191020 43876 uk. ExFvIiafUC5Zhh5I42GU/BN32CizkSUJCnjU+08Kwzj8IpWfVepEL8pAkSajxk8o5z+dDGaVgICh 0aJXFW53RxJGC/0V9Apbm6e/AA14So8iZ0R9sHAXq32bDlMFNLOKxyLFn7RcAsQhSnLVaiczBiBw Psq794tEcSPzvE6LVoIe8Ea1OrsAxVXSX7+jxMaHA0jIHJfvrAyVYV6TBPEohV0gGZN8db3t7dp7 M6kG9EmAh5TqzSQfoTv7zUmI7aGiCJ4enzM8fGqE64BD8zkMgypzbsw6kdVLkVCUT+pNPUW6YlZH 6U5FwFMsH9iZ+swdGhFKhuW0WUcT9JwL8YRZFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for uk
	`uk. 7200 IN DNSKEY ( 257 3 8 AwEAAbOOWSsuXCZ8x/DBsz2tC/58YYi/qul9Mk8sJm5HyNYgQ0oyg6KIxaPvmqcHfyiwma9p+f8S jFZa/51zYQQzWK1flMFyNMl2YMHS/E+7NNa+f1DND23FyBu2VGrXf50c72KVG1s1qnlEusPbkBzh 2zdYRJtiVan+P4OrPmwRfxwfsl7blNWJQkHg2Gy+WeAmAY7PFFlHeDqfYQCJ5bqXJzcvTbh1dPzW uBPeynjXFXCbC5msJQbLcm1KJx2cMNdJJxW9raXj75MJFtotwAGYi7UL285qqia1e6MWfbZKbSmB xkrliGJNSfopBeesJ6LjWHaj+5W/rJdjyhjv3AWNMHE= ) ; keytag 43876`
	`uk. 7200 IN DNSKEY ( 256 3 8 AwEAAeGOYY7fiJwowB47qBZS9G67Bas0rIb23LgGVw1du1K3Is6H2LxfWvtEYyrZ5BE5ddSwLsgz 7F8v/kIBXFhjltAkaU8o+AYSIqDDPlz4+0L1e/ofv42uJ6pcygi74WAWhJOE/QooRUeO8zwTIru7 EgmtjxFXZunQJJmCygY1l5OZ ) ; keytag 43056`
	DNSKEY=43876/SEP is now in the chain-of-trust
	DS=43876/SHA-256 verifies DNSKEY=43876/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`uk. 7200 IN RRSIG ( DNSKEY 8 1 7200 20260805192619 20260701191020 43876 uk. ExFvIiafUC5Zhh5I42GU/BN32CizkSUJCnjU+08Kwzj8IpWfVepEL8pAkSajxk8o5z+dDGaVgICh 0aJXFW53RxJGC/0V9Apbm6e/AA14So8iZ0R9sHAXq32bDlMFNLOKxyLFn7RcAsQhSnLVaiczBiBw Psq794tEcSPzvE6LVoIe8Ea1OrsAxVXSX7+jxMaHA0jIHJfvrAyVYV6TBPEohV0gGZN8db3t7dp7 M6kG9EmAh5TqzSQfoTv7zUmI7aGiCJ4enzM8fGqE64BD8zkMgypzbsw6kdVLkVCUT+pNPUW6YlZH 6U5FwFMsH9iZ+swdGhFKhuW0WUcT9JwL8YRZFQ== )`
	RRSIG=43876 and DNSKEY=43876/SEP verifies the DNSKEY RRset
	DNSKEY=43056 is now in the chain-of-trust
	Query to nsd.nic.uk for tristanself.co.uk/A
	Received 527 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 527 octets ;; HEADER SECTION ;; id = 48079 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260805200417 20260701192322 44346 co.uk. WY5tkNciWrfIQ3g6cVYHnWHqL8JARa4k9EbDF9Fs7RLfLy0KeamY+kLz2emjduXPs/gLzD19UkS7 LLKKI/cEFJ459TxFox0UG7QOXHgn0q6vLBgPJrJEq1XCtrEPNMeVIn4AWdAK0YfPAUzgC3RsatDF 0dVoDoxaOj9ZGrq3wdQy4BAdriHsQ2qb5GvwlbZwvk8VZhsRWnw6dErW4ZW2+ZObpcYOkUeP1McV YvcVaCEtYz+oZKR1JBE2hCETeyThnE0SpEw/0/ql6yRYJ5QBJ2sCJxwGV7+GHPBcZKThQvPUpkAj cXufAkamxcmFyd653SUm1adxUFAYOU+VqtvXWw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 213.248.216.1
	;; Response received from [213.248.216.1] 879 octets ;; HEADER SECTION ;; id = 33602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260811215545 20260707214937 11810 co.uk. CSjTNKjBeOk4s+bllJWr9hWH60DAz1CPBBqCFuoN9DXWa1CZkOKcTFtlNcqVS0d3HgFbH6z3fEzs 5UytVjeE8hK30vkszWFtmnuoaDHGJ192+AQD2j88H13VOGtu6AXXSshvy+fcBNMyp3Ql+fFnIVTJ 2mXW2/U0TvwKffW1RYZnbsQ6uVsXng3wqsle/hhuQ8Hgkr4IdlVO4GpqwHq9KqjyGlr84lnUmLB0 VhqAGDSfJhYvGBzfWjuNyxN4zSZgud+DtXi28KMXCSg9YDsOFz/D0D6YLe2UFAQfKNVWiPliocmq 3gTP2GhtLTBnzgWCIKxL15L2KMdQsIuh25Z/4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone co.uk
	Attempting to learn nameservers for co.uk
	Query to nsa.nic.uk for co.uk/NS
	Received 481 bytes from 156.154.100.3
	;; Response received from [156.154.100.3] 481 octets ;; HEADER SECTION ;; id = 2166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 9 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN NS ;; ANSWER SECTION (9 records) co.uk. 172800 IN NS dns4.nic.uk. co.uk. 172800 IN NS nsa.nic.uk. co.uk. 172800 IN NS dns2.nic.uk. co.uk. 172800 IN NS nsb.nic.uk. co.uk. 172800 IN NS nsd.nic.uk. co.uk. 172800 IN NS nsc.nic.uk. co.uk. 172800 IN NS dns1.nic.uk. co.uk. 172800 IN NS dns3.nic.uk. co.uk. 172800 IN RRSIG ( NS 8 2 172800 20260812081135 20260708073442 44346 co.uk. YZGmte6J4vpdulu4nPG99kTuD7qE+iI4ENszzopoKE7YBzxPxoBPFt04aEE9MVtLY+VXeEW1RUvq h8zdpYiZEbWBQqhzff547QpaOKMuiP8Uv0UytbrjOKh11FlHfeTIWt6BHdYnyXeJ+fFNbcbFhFmo w95PHdl5QgSnHiUFuowdKqBj1C3TVqim3wPxpnIe1ckbd4PZ/yGYeNBlLRuVyrzw8DQNlkHwgypO j6T5VDzItVlAsMyLMcXEoWLcdioemoDdo7BgozDaMJZay06sW30z10VU7mR9tjJ7UzguVLBGBOSt 5LoFafLiv0SiJXtBuoLSqjsvXng3bBaIcj344A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found co.uk nameservers: dns4.nic.uk, nsa.nic.uk, dns2.nic.uk, nsb.nic.uk, nsd.nic.uk, nsc.nic.uk, dns1.nic.uk, dns3.nic.uk

co.uk

	Checking DS between uk and co.uk
	Query to dns2.nic.uk for co.uk/DS
	Received 244 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 244 octets ;; HEADER SECTION ;; id = 40760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DS ;; ANSWER SECTION (2 records) co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 ) co.uk. 300 IN RRSIG ( DS 8 2 300 20260809152626 20260705142958 43056 uk. 1si7PSRjys5PgDtoyqrEti23NM1q6DHd07O8rtv3yEWNTos+KDoq8D+PMqQGVejN5wZMrV/XhN90 2KiJQd3yidEWqwseO7MlU4dOx1861kbnN738reqWcnj/uZlVsI7ZYNNmls7rDNBPhW38sbXbVSpg StDGeXJh44d7r9TE0C8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co.uk in the uk zone
	DS=11810/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co.uk. 300 IN RRSIG ( DS 8 2 300 20260809152626 20260705142958 43056 uk. 1si7PSRjys5PgDtoyqrEti23NM1q6DHd07O8rtv3yEWNTos+KDoq8D+PMqQGVejN5wZMrV/XhN90 2KiJQd3yidEWqwseO7MlU4dOx1861kbnN738reqWcnj/uZlVsI7ZYNNmls7rDNBPhW38sbXbVSpg StDGeXJh44d7r9TE0C8= )`
	RRSIG=43056 and DNSKEY=43056 verifies the DS RRset
	DS=11810/SHA-256 is now in the chain-of-trust
	`co.uk. 300 IN DS ( 11810 8 2 1df4681bdacc3e6296ac7667c42ca33cb57efbc2005ce23064f15fbffa286ff5 )`
	Query to nsd.nic.uk for co.uk/DNSKEY
	Received 879 bytes from 156.154.103.3
	;; Response received from [156.154.103.3] 879 octets ;; HEADER SECTION ;; id = 61437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co.uk. IN DNSKEY ;; ANSWER SECTION (3 records) co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346 co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810 co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260811215545 20260707214937 11810 co.uk. CSjTNKjBeOk4s+bllJWr9hWH60DAz1CPBBqCFuoN9DXWa1CZkOKcTFtlNcqVS0d3HgFbH6z3fEzs 5UytVjeE8hK30vkszWFtmnuoaDHGJ192+AQD2j88H13VOGtu6AXXSshvy+fcBNMyp3Ql+fFnIVTJ 2mXW2/U0TvwKffW1RYZnbsQ6uVsXng3wqsle/hhuQ8Hgkr4IdlVO4GpqwHq9KqjyGlr84lnUmLB0 VhqAGDSfJhYvGBzfWjuNyxN4zSZgud+DtXi28KMXCSg9YDsOFz/D0D6YLe2UFAQfKNVWiPliocmq 3gTP2GhtLTBnzgWCIKxL15L2KMdQsIuh25Z/4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for co.uk
	`co.uk. 7200 IN DNSKEY ( 256 3 8 AwEAAb84lK0l68KN1tW+UEU7QcVQdI0ZY3nK7uI3gbI4oxKB1qDXKAGv5Fte0fXlUETve15LEXS7 7+k1TMDbnfJvmAHqfVuVaDSnNQQoHCJaOOfXL3L44sOyjJdiiSJUeJaKuEth9o4D4mj6BBDljExh /wVHS27X10EAK4eRnSlFdj718yAAPYfump3Ol/a2xG544UJ1WVc848RA+jKdnPgLwnRM6Uhrasu6 3J1cLOqaq820kCWus4pC+Y+V1ufDqgPFVDNA+jrxTO99mdQopVT4Nfsw+BeM9KKLNszOzZfKTsPO xg7zH9ovLnYzNWXE4NUxLNN0Q+5ml7okm0hfdzWBCKc= ) ; keytag 44346`
	`co.uk. 7200 IN DNSKEY ( 257 3 8 AwEAAdbrJwv7eTGXNPhgVglnRszOb/CWgOo38YreB1Pn9waXeT7Z6A2mHUyXvj3ZNH3bQImU49TD /k6iAQBCLrKkbXhgBlV9goKE0dENjbgb+pzwkIEJa+FszfU1Syk6NB+IQ7m61JGQD8Yi7CSeaPug P1/nab9HU8LUm8Xs3/QfbS7G8v9oG5TKo6vJiXyzkGGzEUA7qNrfUlOl1royRDz2G3OuM1RbZPhC AQGSiu9XQexR0hQ6vPOT+s67/wlYecBM6gM9dSej6Fj5ptWj0bQbBWvD9cLfbEzAyb4lWObiMcBv v+F7BECxBIbfZ33XEtQMYjOaNw2kGGhhg0AG5knWZuc= ) ; keytag 11810`
	DNSKEY=11810/SEP is now in the chain-of-trust
	DS=11810/SHA-256 verifies DNSKEY=11810/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`co.uk. 7200 IN RRSIG ( DNSKEY 8 2 7200 20260811215545 20260707214937 11810 co.uk. CSjTNKjBeOk4s+bllJWr9hWH60DAz1CPBBqCFuoN9DXWa1CZkOKcTFtlNcqVS0d3HgFbH6z3fEzs 5UytVjeE8hK30vkszWFtmnuoaDHGJ192+AQD2j88H13VOGtu6AXXSshvy+fcBNMyp3Ql+fFnIVTJ 2mXW2/U0TvwKffW1RYZnbsQ6uVsXng3wqsle/hhuQ8Hgkr4IdlVO4GpqwHq9KqjyGlr84lnUmLB0 VhqAGDSfJhYvGBzfWjuNyxN4zSZgud+DtXi28KMXCSg9YDsOFz/D0D6YLe2UFAQfKNVWiPliocmq 3gTP2GhtLTBnzgWCIKxL15L2KMdQsIuh25Z/4A== )`
	RRSIG=11810 and DNSKEY=11810/SEP verifies the DNSKEY RRset
	DNSKEY=44346 is now in the chain-of-trust
	Query to dns3.nic.uk for tristanself.co.uk/A
	Received 522 bytes from 213.248.220.1
	;; Response received from [213.248.220.1] 522 octets ;; HEADER SECTION ;; id = 1857 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260805200417 20260701192322 44346 co.uk. WY5tkNciWrfIQ3g6cVYHnWHqL8JARa4k9EbDF9Fs7RLfLy0KeamY+kLz2emjduXPs/gLzD19UkS7 LLKKI/cEFJ459TxFox0UG7QOXHgn0q6vLBgPJrJEq1XCtrEPNMeVIn4AWdAK0YfPAUzgC3RsatDF 0dVoDoxaOj9ZGrq3wdQy4BAdriHsQ2qb5GvwlbZwvk8VZhsRWnw6dErW4ZW2+ZObpcYOkUeP1McV YvcVaCEtYz+oZKR1JBE2hCETeyThnE0SpEw/0/ql6yRYJ5QBJ2sCJxwGV7+GHPBcZKThQvPUpkAj cXufAkamxcmFyd653SUm1adxUFAYOU+VqtvXWw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns4.nic.uk for tristanself.co.uk/DNSKEY
	Received 522 bytes from 43.230.48.1
	;; Response received from [43.230.48.1] 522 octets ;; HEADER SECTION ;; id = 23875 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tristanself.co.uk. 172800 IN NS ns-316.awsdns-39.com. tristanself.co.uk. 172800 IN NS ns-997.awsdns-60.net. tristanself.co.uk. 172800 IN NS ns-1057.awsdns-04.org. tristanself.co.uk. 172800 IN NS ns-1817.awsdns-35.co.uk. tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260805200417 20260701192322 44346 co.uk. WY5tkNciWrfIQ3g6cVYHnWHqL8JARa4k9EbDF9Fs7RLfLy0KeamY+kLz2emjduXPs/gLzD19UkS7 LLKKI/cEFJ459TxFox0UG7QOXHgn0q6vLBgPJrJEq1XCtrEPNMeVIn4AWdAK0YfPAUzgC3RsatDF 0dVoDoxaOj9ZGrq3wdQy4BAdriHsQ2qb5GvwlbZwvk8VZhsRWnw6dErW4ZW2+ZObpcYOkUeP1McV YvcVaCEtYz+oZKR1JBE2hCETeyThnE0SpEw/0/ql6yRYJ5QBJ2sCJxwGV7+GHPBcZKThQvPUpkAj cXufAkamxcmFyd653SUm1adxUFAYOU+VqtvXWw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tristanself.co.uk

tristanself.co.uk

	Checking DS between co.uk and tristanself.co.uk
	Query to dns2.nic.uk for tristanself.co.uk/DS
	Received 387 bytes from 103.49.80.1
	;; Response received from [103.49.80.1] 387 octets ;; HEADER SECTION ;; id = 12962 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DS ;; ANSWER SECTION (2 records) tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 ) tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260805200417 20260701192322 44346 co.uk. WY5tkNciWrfIQ3g6cVYHnWHqL8JARa4k9EbDF9Fs7RLfLy0KeamY+kLz2emjduXPs/gLzD19UkS7 LLKKI/cEFJ459TxFox0UG7QOXHgn0q6vLBgPJrJEq1XCtrEPNMeVIn4AWdAK0YfPAUzgC3RsatDF 0dVoDoxaOj9ZGrq3wdQy4BAdriHsQ2qb5GvwlbZwvk8VZhsRWnw6dErW4ZW2+ZObpcYOkUeP1McV YvcVaCEtYz+oZKR1JBE2hCETeyThnE0SpEw/0/ql6yRYJ5QBJ2sCJxwGV7+GHPBcZKThQvPUpkAj cXufAkamxcmFyd653SUm1adxUFAYOU+VqtvXWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tristanself.co.uk in the co.uk zone
	DS=11383/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DS 8 3 3600 20260805200417 20260701192322 44346 co.uk. WY5tkNciWrfIQ3g6cVYHnWHqL8JARa4k9EbDF9Fs7RLfLy0KeamY+kLz2emjduXPs/gLzD19UkS7 LLKKI/cEFJ459TxFox0UG7QOXHgn0q6vLBgPJrJEq1XCtrEPNMeVIn4AWdAK0YfPAUzgC3RsatDF 0dVoDoxaOj9ZGrq3wdQy4BAdriHsQ2qb5GvwlbZwvk8VZhsRWnw6dErW4ZW2+ZObpcYOkUeP1McV YvcVaCEtYz+oZKR1JBE2hCETeyThnE0SpEw/0/ql6yRYJ5QBJ2sCJxwGV7+GHPBcZKThQvPUpkAj cXufAkamxcmFyd653SUm1adxUFAYOU+VqtvXWw== )`
	RRSIG=44346 and DNSKEY=44346 verifies the DS RRset
	DS=11383/SHA-256 is now in the chain-of-trust
	`tristanself.co.uk. 3600 IN DS ( 11383 13 2 7ad1c00b0e5e222331ab680cedd3b9aec469833b59157be5c979d59df2712c24 )`
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/DNSKEY
	Received 399 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 399 octets ;; HEADER SECTION ;; id = 12650 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN DNSKEY ;; ANSWER SECTION (4 records) tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 /JHMi16Z6M8MiVR5A4l9/4fEWOlV6ry5iIAqjkeImo1MdwYXYHcRXhfQOCIYb47WkVPOQTlwAeaH gLs0q9JIZg== ) ; keytag 3339 tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 Gscg2PmqMR1h7lhm/CiEa45JFzqXq5ks+ACBPOpkjVTL3p+CZQLWDIZRYV3L6zIMTFR/V9BTQhV4 78vZ5c32aw== ) ; keytag 63455 tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383 tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260708180000 20260708070000 11383 tristanself.co.uk. PNKJxRFzRhpYF2c6l9QGxnxouTZPSVgaIr25Dwu690oS1fLjMqTaxNCGT/reSfpQyEiyHOqdpAOi 0dgh1dj9JA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tristanself.co.uk
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 /JHMi16Z6M8MiVR5A4l9/4fEWOlV6ry5iIAqjkeImo1MdwYXYHcRXhfQOCIYb47WkVPOQTlwAeaH gLs0q9JIZg== ) ; keytag 3339`
	`tristanself.co.uk. 3600 IN DNSKEY ( 256 3 13 Gscg2PmqMR1h7lhm/CiEa45JFzqXq5ks+ACBPOpkjVTL3p+CZQLWDIZRYV3L6zIMTFR/V9BTQhV4 78vZ5c32aw== ) ; keytag 63455`
	`tristanself.co.uk. 3600 IN DNSKEY ( 257 3 13 HJgXnjrKo/pK21P9LgSDs3p6DpIGteExwDTnfrZiUDoooFMdMEWnNwrgQZdGIJl1I+HgT/700IFU U0QcL5mKoQ== ) ; keytag 11383`
	DNSKEY=11383/SEP is now in the chain-of-trust
	DS=11383/SHA-256 verifies DNSKEY=11383/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tristanself.co.uk. 3600 IN RRSIG ( DNSKEY 13 3 3600 20260708180000 20260708070000 11383 tristanself.co.uk. PNKJxRFzRhpYF2c6l9QGxnxouTZPSVgaIr25Dwu690oS1fLjMqTaxNCGT/reSfpQyEiyHOqdpAOi 0dgh1dj9JA== )`
	RRSIG=11383 and DNSKEY=11383/SEP verifies the DNSKEY RRset
	DNSKEY=3339 is now in the chain-of-trust
	DNSKEY=63455 is now in the chain-of-trust
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Received 405 bytes from 205.251.196.33
	;; Response received from [205.251.196.33] 405 octets ;; HEADER SECTION ;; id = 25081 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. kEW5XA8RqkjDz6xTICAviXtByqL2WAnt3nlLZk6e1s9WrJLuT9DRaJnJo1JVjhFKxvVBiHdUvkyQ a7IywG4Jwg== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. v07J4ADE/rC6jxYJZRSFW/ne2fZBHHgDhmFpOM4U5e8AFP/pT1ZOsce9yhlyXgAymrAKKJwtD7Ok ZeqW7Ukrfw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1057.awsdns-04.org is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-997.awsdns-60.net for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 241 octets ;; HEADER SECTION ;; id = 52806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. 8/f9DrHRFJwwfIAfQIUrK7Q85YsjQUdjupMhSmJIORa9BZf8KwARvQbvH2eB2gS+Qy6aTZ+PE8EN 7GWmuwzsgQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-316.awsdns-39.com for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 241 octets ;; HEADER SECTION ;; id = 49908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. 3yJTU+FrW940aBrPmj3+qDG3pIyM5o5pJ6+7jKCMRJhjeqBY5AP3uUUO/EQ2M3qWUN3eLpWjgmRb tVnbV7Y9vQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/SOA
	Received 241 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 241 octets ;; HEADER SECTION ;; id = 60159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN SOA ;; ANSWER SECTION (2 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. 6bh/aTdbpYWVmkz8hYPd2ngZMPP+TBsRoiMRya0lD2Ix2lKXve0PQJTCai9VIc80b8Oev2DehH3X B5uF1LgHtw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1057.awsdns-04.org for tristanself.co.uk/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. v07J4ADE/rC6jxYJZRSFW/ne2fZBHHgDhmFpOM4U5e8AFP/pT1ZOsce9yhlyXgAymrAKKJwtD7Ok ZeqW7Ukrfw== )`
	RRSIG=3339 and DNSKEY=3339 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. kEW5XA8RqkjDz6xTICAviXtByqL2WAnt3nlLZk6e1s9WrJLuT9DRaJnJo1JVjhFKxvVBiHdUvkyQ a7IywG4Jwg== )`
	RRSIG=3339 and DNSKEY=3339 verifies the SOA RRset

tristanself.co.uk

	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Received 405 bytes from 205.251.195.229
	;; Response received from [205.251.195.229] 405 octets ;; HEADER SECTION ;; id = 50588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. CRxPlge8RLvCXNnWcUV7XNWl151K5OJ/ROx3+B/PpJyxcamMFw5lBHd/xphID4MQsn5rD5ue2Zni cWa4P7TuZQ== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. 1NtrA6uNZeLKmS2qNonjFNk0kZH8zdpcOYHdWqc6ufg/dfXq0a/YzpsgjK0oP7QNKj20vAe6t9d4 xJxMPkRm9Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-997.awsdns-60.net is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-997.awsdns-60.net for tristanself.co.uk/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. 1NtrA6uNZeLKmS2qNonjFNk0kZH8zdpcOYHdWqc6ufg/dfXq0a/YzpsgjK0oP7QNKj20vAe6t9d4 xJxMPkRm9Q== )`
	RRSIG=3339 and DNSKEY=3339 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. CRxPlge8RLvCXNnWcUV7XNWl151K5OJ/ROx3+B/PpJyxcamMFw5lBHd/xphID4MQsn5rD5ue2Zni cWa4P7TuZQ== )`
	RRSIG=3339 and DNSKEY=3339 verifies the SOA RRset

tristanself.co.uk

	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Received 405 bytes from 205.251.193.60
	;; Response received from [205.251.193.60] 405 octets ;; HEADER SECTION ;; id = 51238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. sZcjle9UTfuknIUGJ025DVn/+2SR/qcbKtgoviU2Rpx6qPbfNWdkWAVTm62rERWH9ZD/TKziWypZ ygUYLpgVgw== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. QnxJlIs3ufoPuAJF1D+b+v+7G7dEkYmNHPl1h5C0NHWRc+ev1y1o5LMjU8G3rYU9Gp6c3QV7urd+ uLAR7LoKrA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-316.awsdns-39.com is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-316.awsdns-39.com for tristanself.co.uk/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. QnxJlIs3ufoPuAJF1D+b+v+7G7dEkYmNHPl1h5C0NHWRc+ev1y1o5LMjU8G3rYU9Gp6c3QV7urd+ uLAR7LoKrA== )`
	RRSIG=3339 and DNSKEY=3339 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. sZcjle9UTfuknIUGJ025DVn/+2SR/qcbKtgoviU2Rpx6qPbfNWdkWAVTm62rERWH9ZD/TKziWypZ ygUYLpgVgw== )`
	RRSIG=3339 and DNSKEY=3339 verifies the SOA RRset

tristanself.co.uk

	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Received 405 bytes from 205.251.199.25
	;; Response received from [205.251.199.25] 405 octets ;; HEADER SECTION ;; id = 14824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tristanself.co.uk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) tristanself.co.uk. 900 IN SOA ( ns-1817.awsdns-35.co.uk. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. p19k7XWKWdr64E9ywGd4oWgesKWrTux8rGPGvqwR+Qfa9R+lCx7bTHU+8BAO+tG5tKdaicnU62w8 5aOd7OysvA== ) tristanself.co.uk. 86400 IN NSEC ( \000.tristanself.co.uk. NS SOA PTR HINFO MX TXT RP AAAA SRV NAPTR SSHFP RRSIG NSEC DNSKEY NSEC3PARAM TLSA CDS CDNSKEY SVCB HTTPS SPF CAA ) tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. 2clvxX5RIv0Fcfzz0HWXTCOSXtRVUydJSqDIyX67MCEdEt21f1x6qNdh7XgMVFsO0BWY60EbF8dF u9MNo/VOLg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1817.awsdns-35.co.uk is authoritative for tristanself.co.uk
	Found RRSIG signed by tristanself.co.uk zone
	Query to ns-1817.awsdns-35.co.uk for tristanself.co.uk/A
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`tristanself.co.uk. 86400 IN RRSIG ( NSEC 13 3 86400 20260709122707 20260708102707 3339 tristanself.co.uk. 2clvxX5RIv0Fcfzz0HWXTCOSXtRVUydJSqDIyX67MCEdEt21f1x6qNdh7XgMVFsO0BWY60EbF8dF u9MNo/VOLg== )`
	RRSIG=3339 and DNSKEY=3339 verifies the NSEC RRset
	NSEC proves no records of type A exist for tristanself.co.uk
	Found 1 RRSIGs over SOA RRset
	`tristanself.co.uk. 900 IN RRSIG ( SOA 13 3 900 20260708124207 20260708102707 3339 tristanself.co.uk. p19k7XWKWdr64E9ywGd4oWgesKWrTux8rGPGvqwR+Qfa9R+lCx7bTHU+8BAO+tG5tKdaicnU62w8 5aOd7OysvA== )`
	RRSIG=3339 and DNSKEY=3339 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tristanself.co.uk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: