[EXT] [dns-operations] Validation of many domains in .DE is failing
Jake Zack
jake.zack at cira.ca
Tue May 5 22:26:53 UTC 2026
Aye, started at least 2 hours ago...
https://www.reddit.com/r/sysadmin/comments/1t4qr6h/dns_issues_for_de_tld_servfail/
Looks like there was perhaps, according to a NameCheap link, scheduled registry maintenance...
https://www.namecheap.com/status-updates/planned-denic-de-registry-scheduled-maintenance-may-5-2026/
My heart goes out to them...literally my worst nightmare.
If there's anyone that has the talent on-staff to diagnose and fix this quickly, it's them.
-jake
On 2026-05-05, 6:20 PM, "dns-operations on behalf of Jan-Piet Mens" <dns-operations-bounces at dns-oarc.net <mailto:dns-operations-bounces at dns-oarc.net> on behalf of list at mens.de <mailto:list at mens.de>> wrote:
[You don't often get email from list at mens.de <mailto:list at mens.de>. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification <https://aka.ms/LearnAboutSenderIdentification> ]
Something's wrong in .DE: (monitoring of a .DE zone of mine caught it)
$ dig @8.8.8.8 c-und-a.de
; <<>> DiG 9.20.0 <<>> @8.8.8.8 c-und-a.de
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 21058
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; EDE: 6 (DNSSEC Bogus): (RRSIG with malformed signature found for a0d5d1p51kijsevll74k523
htmq406bk.de/nsec3 (keytag=33834))
;; QUESTION SECTION:
;c-und-a.de. IN A
;; Query time: 42 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
;; WHEN: Tue May 05 20:36:27 UTC 2026
;; MSG SIZE rcvd: 142
FWIW, 1.1.1.1 reports EDE 22 (No reacheable authority).
Many .DE zones are failing with similar messages.
-JP
_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net <mailto:dns-operations at lists.dns-oarc.net>
https://lists.dns-oarc.net/mailman/listinfo/dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operations>
CLASSIFICATION:CONFIDENTIAL
More information about the dns-operations
mailing list