DNSSEC Debugger - 1whois.ru

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-11 22:10:28 UTC

Analyzing DNSSEC problems for 1whois.ru

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1141 octets ;; HEADER SECTION ;; id = 45587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261201000000 20261110000000 38696 . TuNb+MGI2u01zLpoSlOCQ90qWsYvKOXIqPmhHWXsKss1JDrWc9akScIE/LDT5mobotEn8vmGICOF WEeVN2/usP2HPvYCJh8IcD1AUDsr3UPEqTI6O55MJ8FteyK2xiyQJ8NzxQ6pAjKkpAmY3FxL0+v5 lmi7Qlb1pMw8rwqL331lEhAxHFDRNFsY4rrwud1eKvsT6DdWnHU3bzNUAzTtsnb6d2JM116+lsQD KzuqokOVGWcf/ROz1Q6lnjI8xGKwEAV+khmd099z6Y1l//t3T8QkuIbDIL+yxmuygB5/5O4/T/ZH 75asCe0qE2FoHFhrkgKTFWjuyt5mYVkqAYsKSg== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to a.root-servers.net for 1whois.ru/A
	Received 757 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 757 octets ;; HEADER SECTION ;; id = 21556 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261124200000 20261111190000 8763 . vSFdXDGZ4pfBJQ+GUbsunmGkWf8X4IHr1eOirl+OM0IunOE0fj6DnMFfzrxNnHKrJjECzSmc99DA z2oWvSacxN+ptt6fBYijHdtlFajLS+DBplsfUvtzrlN3Cytbgyut3P/gAEYmN8nOB8RXgH5UuU7S K5RxHmpFWoxL1+3MoBC0hMsxJW8e/8UXqiFwA3DFXASaJsl5XXb2WxDkfiVnLXCGHV/wZFy0FPS1 bXlXfLFemS27QjvxQiVmKOGO6MbfNv6CBZxaIn155apLg1hFt2WaHN/DVQm7AbL9xA7LYVt0pPeh kWQHaWQDbMQWdu/KofpA0lPgQOMJqqhkG2XDpA== ) ;; ADDITIONAL SECTION (13 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 c.tld-servers.ru. 172800 IN A 194.190.122.17 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for ru/DNSKEY
	Received 750 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 750 octets ;; HEADER SECTION ;; id = 42701 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS c.tld-servers.ru. ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261124200000 20261111190000 8763 . vSFdXDGZ4pfBJQ+GUbsunmGkWf8X4IHr1eOirl+OM0IunOE0fj6DnMFfzrxNnHKrJjECzSmc99DA z2oWvSacxN+ptt6fBYijHdtlFajLS+DBplsfUvtzrlN3Cytbgyut3P/gAEYmN8nOB8RXgH5UuU7S K5RxHmpFWoxL1+3MoBC0hMsxJW8e/8UXqiFwA3DFXASaJsl5XXb2WxDkfiVnLXCGHV/wZFy0FPS1 bXlXfLFemS27QjvxQiVmKOGO6MbfNv6CBZxaIn155apLg1hFt2WaHN/DVQm7AbL9xA7LYVt0pPeh kWQHaWQDbMQWdu/KofpA0lPgQOMJqqhkG2XDpA== ) ;; ADDITIONAL SECTION (13 records) c.tld-servers.ru. 172800 IN A 194.190.122.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 d.dns.ripn.net. 172800 IN A 194.190.124.17 b.dns.ripn.net. 172800 IN A 194.85.252.62 a.dns.ripn.net. 172800 IN A 193.232.128.6 c.tld-servers.ru. 172800 IN AAAA 2a09:bd00:1:0:194:190:122:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 ;; { "EDNS-VERSION": 0 }
	Found child zone ru

	Checking DS between . and ru
	Query to b.root-servers.net for ru/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 19743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 ) ru. 86400 IN RRSIG ( DS 8 1 86400 20261124200000 20261111190000 8763 . vSFdXDGZ4pfBJQ+GUbsunmGkWf8X4IHr1eOirl+OM0IunOE0fj6DnMFfzrxNnHKrJjECzSmc99DA z2oWvSacxN+ptt6fBYijHdtlFajLS+DBplsfUvtzrlN3Cytbgyut3P/gAEYmN8nOB8RXgH5UuU7S K5RxHmpFWoxL1+3MoBC0hMsxJW8e/8UXqiFwA3DFXASaJsl5XXb2WxDkfiVnLXCGHV/wZFy0FPS1 bXlXfLFemS27QjvxQiVmKOGO6MbfNv6CBZxaIn155apLg1hFt2WaHN/DVQm7AbL9xA7LYVt0pPeh kWQHaWQDbMQWdu/KofpA0lPgQOMJqqhkG2XDpA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ru in the . zone
	DS=26734/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20261124200000 20261111190000 8763 . vSFdXDGZ4pfBJQ+GUbsunmGkWf8X4IHr1eOirl+OM0IunOE0fj6DnMFfzrxNnHKrJjECzSmc99DA z2oWvSacxN+ptt6fBYijHdtlFajLS+DBplsfUvtzrlN3Cytbgyut3P/gAEYmN8nOB8RXgH5UuU7S K5RxHmpFWoxL1+3MoBC0hMsxJW8e/8UXqiFwA3DFXASaJsl5XXb2WxDkfiVnLXCGHV/wZFy0FPS1 bXlXfLFemS27QjvxQiVmKOGO6MbfNv6CBZxaIn155apLg1hFt2WaHN/DVQm7AbL9xA7LYVt0pPeh kWQHaWQDbMQWdu/KofpA0lPgQOMJqqhkG2XDpA== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=26734/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 26734 8 2 c48be23d7998afa2ef0993609413e58bc7ee9e356642a7182f2c3ea321fa9911 )`
	Query to a.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 745 octets ;; HEADER SECTION ;; id = 19003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460 ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20261126000000 20261106000000 26734 ru. swwY+TGIxbqC0QNwts1P5A94cs/4OZKXDgWaFWI7sHtwvymwQCMkk37jIjdn6VIXALZoqQup2RBW IfDa3xBLOEVqXtTgpTS7/P8M+KaXoHJvOopt39zMirCwz32SK0vGMB5LC7CVmPK3T0HuRFBVQ7Ci qvCYdGVzLTIL1JpNNkPVreFkEpg58SBOWi7KqXXHlFdTopL5N1MOqP6j7fYf8bGjm9bJPLGV2FJg tEXE2CkNDPlj085VRELjMIlTU+nmFh3csyrUewmbNMW1KYnNyDuyCRyJ3anpj7m1vkQn4iurjJ+T c7PWje+tMVtXPlfEMVdowSaX7tH2AWdojuJVKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAc0x7WIRpwiOloLTO58z32pgHOoALc8NKwCUujCwRvZYpAN/8/jGMKJKimKoWumuroZSYjfx SWBdcG90KfWZmRN6RP5oBYqh9DGXFbp8X9cObfNbWXhqKHfTE8s5p48vwi7I8Cb62VawvEsviHMR TLmHSl7HEN0OsBo2dKQDyTEp ) ; keytag 56460`
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAd+cacI5tMDtkvRg5WH1oNbQW1QnoS6zMBe94PImVKXMyg17dOqGZgEG7etk9e30p1IQAZ6B FzmaUSqw3jK52g5HzRMLAMGhG3DPYvA7q5M/cZB9/eckdO7Nb08RUvUHGpM1KFFThIxJgJEyEA/3 oiDer/bBMIBb9VtweMR0wsCsSfgxtCoZ1SGSvJIPOxqPlX3wQJO+waKU/WqdkHDmP6WpNmZTnQlm UWxL4K6vSK9QDCMpD54KSCcuuFm2kn5KKvA2QL+12xQw7MKUyl5eT5shwUP/yp/wNFixDfvdN9Im 2BJiqmeZGWSYde+IGJ33JFWrXu6CLiQy7UWPqKygPdM= ) ; keytag 26734`
	DNSKEY=26734/SEP is now in the chain-of-trust
	DS=26734/SHA-256 verifies DNSKEY=26734/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20261126000000 20261106000000 26734 ru. swwY+TGIxbqC0QNwts1P5A94cs/4OZKXDgWaFWI7sHtwvymwQCMkk37jIjdn6VIXALZoqQup2RBW IfDa3xBLOEVqXtTgpTS7/P8M+KaXoHJvOopt39zMirCwz32SK0vGMB5LC7CVmPK3T0HuRFBVQ7Ci qvCYdGVzLTIL1JpNNkPVreFkEpg58SBOWi7KqXXHlFdTopL5N1MOqP6j7fYf8bGjm9bJPLGV2FJg tEXE2CkNDPlj085VRELjMIlTU+nmFh3csyrUewmbNMW1KYnNyDuyCRyJ3anpj7m1vkQn4iurjJ+T c7PWje+tMVtXPlfEMVdowSaX7tH2AWdojuJVKA== )`
	RRSIG=26734 and DNSKEY=26734/SEP verifies the DNSKEY RRset
	DNSKEY=56460 is now in the chain-of-trust
	Query to c.tld-servers.ru for 1whois.ru/A
	Received 568 bytes from 194.190.122.17
	;; Response received from [194.190.122.17] 568 octets ;; HEADER SECTION ;; id = 3916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 1whois.ru. 345600 IN NS ns1.kreoton.com. 1whois.ru. 345600 IN NS ns2.kreoton.com. j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261129053500 20261029141641 56460 ru. ZrnTo6K65Ki2O/h5/JG1A7WdhQl9F+s21iKPoiq1tKPvT5HTNKZEzjS32HrQC7nCKlHtqJecMY7/ yG2sNENt3bqt/eqsK0q0RXW5p4gyfOaF6TyDK/eJDlWZk8wFrCxuE8SLajfOWAaAVS5Jbg6NRLWA R0AAHQcNLwxLXtMBPbg= ) grj2neu86fal1ncmi6m4mpkakpbnrduv.ru. 3600 IN NSEC3 ( 1 1 0 - gs93ebav034qumlsdlaft87tqn39c4ah NS DS RRSIG ) grj2neu86fal1ncmi6m4mpkakpbnrduv.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261203045944 20261029121651 56460 ru. A7CA5itU79lzPCPz/H37kwsuDdzX5ULtQrFRaQCoPW2zlizQ68JnJfzwgY4T8RphHvuOUpwCezxN ZrgDyYH9Q2mN2K7BgXT3i3FsdNmwh1l3LTs3rZL4IPGSl02Nt4+R8Hnqe2j4S4m/risQI2uzNPKr glhB6+pkJI1RKxYequ8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.dns.ripn.net for 1whois.ru/DNSKEY
	Received 568 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 568 octets ;; HEADER SECTION ;; id = 59745 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 1whois.ru. 345600 IN NS ns1.kreoton.com. 1whois.ru. 345600 IN NS ns2.kreoton.com. j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) j20c0qkdhua3cumnkst289ff06u2sq91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261129053500 20261029141641 56460 ru. ZrnTo6K65Ki2O/h5/JG1A7WdhQl9F+s21iKPoiq1tKPvT5HTNKZEzjS32HrQC7nCKlHtqJecMY7/ yG2sNENt3bqt/eqsK0q0RXW5p4gyfOaF6TyDK/eJDlWZk8wFrCxuE8SLajfOWAaAVS5Jbg6NRLWA R0AAHQcNLwxLXtMBPbg= ) grj2neu86fal1ncmi6m4mpkakpbnrduv.ru. 3600 IN NSEC3 ( 1 1 0 - gs93ebav034qumlsdlaft87tqn39c4ah NS DS RRSIG ) grj2neu86fal1ncmi6m4mpkakpbnrduv.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261203045944 20261029121651 56460 ru. A7CA5itU79lzPCPz/H37kwsuDdzX5ULtQrFRaQCoPW2zlizQ68JnJfzwgY4T8RphHvuOUpwCezxN ZrgDyYH9Q2mN2K7BgXT3i3FsdNmwh1l3LTs3rZL4IPGSl02Nt4+R8Hnqe2j4S4m/risQI2uzNPKr glhB6+pkJI1RKxYequ8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone 1whois.ru

1whois.ru

	Checking DS between ru and 1whois.ru
	Query to d.dns.ripn.net for 1whois.ru/DS
	Received 744 bytes from 194.190.124.17
	;; Response received from [194.190.124.17] 744 octets ;; HEADER SECTION ;; id = 38285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN NSEC3 ( 1 1 0 - j21lulr2unpa28sere28ovnjnj67qp7v NS SOA RRSIG DNSKEY NSEC3PARAM ) J20C0QKDHUA3CUMNKST289FF06U2SQ91.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261129053500 20261029141641 56460 ru. ZrnTo6K65Ki2O/h5/JG1A7WdhQl9F+s21iKPoiq1tKPvT5HTNKZEzjS32HrQC7nCKlHtqJecMY7/ yG2sNENt3bqt/eqsK0q0RXW5p4gyfOaF6TyDK/eJDlWZk8wFrCxuE8SLajfOWAaAVS5Jbg6NRLWA R0AAHQcNLwxLXtMBPbg= ) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4071060 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20261219183017 20261111201636 56460 ru. a+xmvhvMXiFw8ZV8NbPEy2eAxA5k0EYmXQC1oMy0W7ZyBKS1ZdOtXMzzLWl4qO7SvjeH9FztPjjl +uXKR2M0nKbRiiQiY6eDnfJ5+vPz8fPW7QyvFbKkylHIlg3gCU7nXTLIfkXtgx8AVVITlQpE/Vsx NAVfIHEyBAVoMBwYxkA= ) GRJ2NEU86FAL1NCMI6M4MPKAKPBNRDUV.ru. 3600 IN NSEC3 ( 1 1 0 - gs93ebav034qumlsdlaft87tqn39c4ah NS DS RRSIG ) GRJ2NEU86FAL1NCMI6M4MPKAKPBNRDUV.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20261203045944 20261029121651 56460 ru. A7CA5itU79lzPCPz/H37kwsuDdzX5ULtQrFRaQCoPW2zlizQ68JnJfzwgY4T8RphHvuOUpwCezxN ZrgDyYH9Q2mN2K7BgXT3i3FsdNmwh1l3LTs3rZL4IPGSl02Nt4+R8Hnqe2j4S4m/risQI2uzNPKr glhB6+pkJI1RKxYequ8= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for 1whois.ru in the ru zone
	Query to ns2.kreoton.com for 1whois.ru/DNSKEY
	Received 100 bytes from 89.23.33.202
	;; Response received from [89.23.33.202] 100 octets ;; HEADER SECTION ;; id = 43436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) 1whois.ru. 3600 IN SOA ( ns1.kreoton.com. hostmaster.kreoton.com. 185 ;serial 900 ;refresh 600 ;retry 86400 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.kreoton.com for 1whois.ru/A
	Received 54 bytes from 89.23.33.202
	;; Response received from [89.23.33.202] 54 octets ;; HEADER SECTION ;; id = 60506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN A ;; ANSWER SECTION (1 record) 1whois.ru. 3600 IN A 77.37.208.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.kreoton.com is authoritative for 1whois.ru
	Query to ns1.kreoton.com for 1whois.ru/SOA
	Received 486 bytes from 77.37.208.110
	;; Response received from [77.37.208.110] 486 octets ;; HEADER SECTION ;; id = 21699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN SOA ;; ANSWER SECTION (1 record) 1whois.ru. 3600 IN SOA ( ns1.kreoton.com. hostmaster.kreoton.com. 185 ;serial 900 ;refresh 600 ;retry 86400 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (5 records) ns1.kreoton.com. 3600 IN A 77.37.208.110 ns1.kreoton.com. 3600 IN RRSIG ( A 8 3 3600 20261117014359 20261107004359 44334 kreoton.com. 4t5tT8+L8P8q6rFhpZlBM277SHGMqFh0U+hJkb5bvAAk+8R/i+crovjaBXSVQDoWCrcAWJOgWCcS NuLi2cyGZgFSXNTIVX8b9YrUU98Jj5c0FCLg+F4vbEMSV2528O3lk7QWhEEUrwuI7laFqv+VnvZ4 /1qmJ7rBEDxgv5t++QE= ) ns1.kreoton.com. 3600 IN AAAA 2a02:2168:a11:4699::3 ns1.kreoton.com. 3600 IN RRSIG ( AAAA 8 3 3600 20261117014359 20261107004359 44334 kreoton.com. KUylW7SAAvFf5mcKZT138oeSBDB+qHF8PLcC9JIxvDZHwk0+ySU1kel2+FAaG/7fKvOIDbjQb2CJ 51+NYVguDRM4wMc9xKkenYwBnpGW05/KEO3juX8sS8nfG/lJMFE33bp9SU8UEFJQNvOVXj307aQj EQbTOiwxuNb2jqQ3QZ0= ) ;; { "EDNS-VERSION": 0 }
	Query to ns2.kreoton.com for 1whois.ru/A
	1whois.ru A RR has value 77.37.208.110
	No RRSIGs found

1whois.ru

	Query to ns1.kreoton.com for 1whois.ru/A
	Received 54 bytes from 77.37.208.110
	;; Response received from [77.37.208.110] 54 octets ;; HEADER SECTION ;; id = 29060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1whois.ru. IN A ;; ANSWER SECTION (1 record) 1whois.ru. 3600 IN A 77.37.208.110 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.kreoton.com is authoritative for 1whois.ru
	Query to ns1.kreoton.com for 1whois.ru/A
	1whois.ru A RR has value 77.37.208.110
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 1whois.ru at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: