Test Zone HTML Links

The below is a lits of HTML links to DNS zone names that may have various DNSSEC problems.

Legend:

The following table describes the components of a record name that indicate how the data in the record has potentally been affected

TypeName ComponentDescription
RecordAAn A (IPv4) address record
RecordAAAAAn AAAA (IPv6) address record
RecordCNAMEA CNAME record pointing to an address record
RecordNSAn NS record pointing to a child zone.
RecordTXT
RecordlonglabelA TXT record with a maximum length label (63)
ManipulationgoodAn unmodified record that should be completely valid.
ManipulationbadsignThe RRSIG signature data was modified after signing so the signature should no longer be a valid signature.
ManipulationnosigThe RRSIG record has been completely removed from the data set and is not available to verify the original record.
ManipulationbaddataThe data in the record was modified after signing and thus the signature should not validate the record data. Note: modified CNAME records will point to a otherwise valid domain name within the zone (see cnametodne)
ManipulationfuturedateThe record and signature are valid but the inception date of the RRSIG is in the future and should not be valid yet.
ManipulationpastdateThe expiration date of the RRSIG covering the record has expired.
Manipulationreverseddates
Manipulationinsecure-ns
Manipulationgood-ns
Manipulationbadsign-ns
Manipulationnosig-ns
Manipulationnods-ns
Manipulationfuturedate-ds
Manipulationpastdate-ds
Manipulationreverseddates-ns
Manipulationrollzsk-ns
Manipulationnewzsk-ns
Manipulationnewkeys-ns
Manipulationrsamd5keys-ns
Manipulationnsec3-ns
ManipulationcnametodneThe CNAME record has been modified to point to a record that never existed in the signed zone.

Records may contain any number of the above components. For example, a record name of "nosig-cname-to-futuredate-a" would be a CNAME record with no signature which was pointing at an A record with an RRSIG which is not yet valid at the time the signature was created.

Records in test.dnssec-tools.org

Records in nsec3-ns.test.dnssec-tools.org

Records in rsamd5keys-ns.test.dnssec-tools.org

Records in newkeys-ns.test.dnssec-tools.org

Records in newzsk-ns.test.dnssec-tools.org

Records in rollzsk-ns.test.dnssec-tools.org

Records in reverseddates-ns.test.dnssec-tools.org

Records in pastdate-ds.test.dnssec-tools.org

Records in futuredate-ds.test.dnssec-tools.org

Records in nods-ns.test.dnssec-tools.org

Records in nosig-ns.test.dnssec-tools.org

Records in badsign-ns.test.dnssec-tools.org

Records in good-ns.test.dnssec-tools.org

Records in insecure-ns.test.dnssec-tools.org