Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2025-07-04 01:46:41 UTC

Analyzing DNSSEC problems for ng.mil

.
Found 4 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
mil
Found 1 DS records for mil in the . zone
DS=63500/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
Found 3 DNSKEY records for mil
DS=63500/SHA-256 verifies DNSKEY=63500/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=14128 and DNSKEY=14128 verifies the DNSKEY RRset
ng.mil
Found 2 DS records for ng.mil in the mil zone
DS=31984/SHA-1 uses a deprecated digest algorithm
DS=31984/SHA-256 has algorithm RSASHA256
DS=31984/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=14128 and DNSKEY=14128 verifies the DS RRset
Found 4 DNSKEY records for ng.mil
DS=31984/SHA-256 verifies DNSKEY=31984/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=31984 and DNSKEY=31984/SEP verifies the DNSKEY RRset
NS01.ARMY.MIL is authoritative for ng.mil
No RRSIGs found
ng.mil
NS02.ARMY.MIL is authoritative for ng.mil
No RRSIGs found
ng.mil
NS03.ARMY.MIL is authoritative for ng.mil
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ng.mil at dnsviz.net.

DNSSEC Debugger

↓ Advanced options