SecSpider the DNSSEC Monitoring Project
Home | Blog | About | FAQ | Documentation | Usage | Pollers | GPG Key | IRL
Check out our BIND formatted Trust Anchors File!
Check out our new blog entry about our enhanced zone drilldown pages: featuring zones' availability (PMTU failure reports) and counts of state RRsets!

To add a zone for monitoring, please submit below:

Vouch for or against a zone's production status

For more information, questions, or comments please contact:
Eric Osterweil (eoster@cs.ucla.edu)
Dan Massey (massey@cs.colostate.edu)
Lixia Zhang (lixia@cs.ucla.edu)

Search for zone:
Deployment status as of: Thu Jul 2 00:56:41 2009 UTC

Monitoring Summary:

18092 Zones
16406 Zones have NS sets that match their parents' delegation set
11983 DNSSEC enabled zones
4572 Zones use both KSKs and ZSKs
3476 Production DNSSEC-enabled zones
Distribution of key algorithms in use:
Algorithm # Keys
RSA/MD5 [RSAMD5]4
Diffie-Hellman [DH]0
DSA/SHA-1 [DSA]19
Elliptic Curve [ECC]0
RSA/SHA-1 [RSASHA1]11194
Indirect [INDIRECT]0
RSA-NSEC3-SHA1 [RSASHA1-NSEC3-SHA1]106
Private [PRIVATEDNS]0
Private [PRIVATEOID]0
Reserved 00
Reserved 2550
Production DNSSEC-enabled Zones: (in DNS canonical order):
"lopp.ae." through "159.68.193...addr.arpa."
"16.68.193....addr.arpa." through "206.17.217...addr.arpa."
"207.17.217...addr.arpa." through "0.a.2.ip6.arpa."
"8.c.e.0.0.....ip6.arpa." through "vcard.bg."
"vrz99.bg." through "rodrigosoa...es.eti.br."
"ancine.gov.br." through "trfrj.jus.br."
"trt1.jus.br." through "intermart.com."
"invenior-inc.com." through "active24.cz."
"agenturalim.cz." through "kuchyne-ok.cz."
"lidovky.cz." through "vevery.cz."
"videoporadce.cz." through "immunarraytor.de."
"ingenieurb...inbach.de." through "vitron.de."
"vsw-mittel...chland.de." through "ericgermann.net."
"faelix.net." through "name.pr."
"net.pr." through "cafax.se."
"capablo.se." through "housecompany.se."
"hpam.se." through "motorcykelmassa.se."
"mpati.se." through "snork.se."
"soderhamn.se." through "xn--aloevx...en-z2a.se."
"xn--amatrb...er-ufb.se." through "xn--zckzah."
All Monitored Zones: (in DNS canonical order):
"." through "131.111.89...addr.arpa."
"132.111.89...addr.arpa." through "aarant.sec...nsops.biz."
"aardema.se...nsops.biz." through "bs."
"bt." through "nikomotos.com."
"nomalinks.com." through "mobilaaa.cz."
"mobiltelefon.cz." through "rotary-jena.de."
"rotenasen.de." through "lu."
"bilderservice.lu." through "nods.bogus...etlabs.nl."
"ok.bogussi...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "nods.unkno...etlabs.nl."
"ok.unknown...etlabs.nl." through "nods.unkno...etlabs.nl."
"ok.unknown...etlabs.nl." through "nods.unkno...etlabs.nl."
"ok.unknown...etlabs.nl." through "unknownalg...etlabs.nl."
"bogussig.u...etlabs.nl." through "unknownalg...etlabs.nl."
"bogussig.u...etlabs.nl." through "unknownalg...etlabs.nl."
"bogussig.u...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "signotince...etlabs.nl."
"unknownalg...etlabs.nl." through "sigexpired...etlabs.nl."
"signotince...etlabs.nl." through "ok.signoti...etlabs.nl."
"sigexpired...etlabs.nl." through "ok.signoti...etlabs.nl."
"sigexpired...etlabs.nl." through "nods.signo...etlabs.nl."
"ok.signoti...etlabs.nl." through "bogussig.s...etlabs.nl."
"nods.signo...etlabs.nl." through "1024.org."
"2000werm.org." through "cc1.ru."
"cdmashop.ru." through "studak.ru."
"subarenda.ru." through "emailerbju...demail.se."
"energiborren.se." through "morten.se."
"motorcykelmassa.se." through "toget.se."
"tolonet.se." through "zw."

Distribution of the number of vulnerable RRsets in zones

Distribution of key lifetimes on DNSKEY RRsets

Production Islands of trust