xn--wgbh1c. DNSSEC fail

Jan Schaumann jschauma at netmeister.org
Sat Jan 3 20:13:27 UTC 2026


Hi,

It looks like DNSSEC is broken on the xn--wgbh1c.
ccTLD (Arabic Egypt):

$ dig xn--wgbh1c. soa

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; EDE: 7 (Signature Expired): (for DNSKEY xn--wgbh1c., id = 65350: RRSIG xn--wgbh1c., expiration = 1766103481)

This appears to have expired since

$ TZ=UTC date -j -f %s 1766103481
Fri Dec 19 00:18:01 UTC 2025

https://domain.eg/en/contact-us/ lists domreg at scu.eg
as the contact address, so I've reached out there, but
IME the ccTLD operators are not always reliably
reachable or responsive, so sharing here as well in
case anybody happens to know the right folks.

-Jan


More information about the dns-operations mailing list