nkb.ch zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2a01:6980:aca9:100::21, 2a01:6980:aca9:100::22)
nkb.ch/A: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/A: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (2a01:6980:aca9:100::21, 2a01:6980:aca9:100::22, UDP_-_NOEDNS_)
nkb.ch/A: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/AAAA: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/AAAA: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/DNSKEY (alg 8, id 24028): DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/DNSKEY (alg 8, id 24028): The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/DNSKEY (alg 8, id 35452): DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/DNSKEY (alg 8, id 35452): The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/DNSKEY (alg 8, id 50191): DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/DNSKEY (alg 8, id 50191): The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/DNSKEY: The response had an invalid RCODE (FORMERR). See RFC 1035, Sec. 4.1.1. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_512_D_KN)
nkb.ch/MX: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/MX: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/MX: The response had an invalid RCODE (FORMERR). See RFC 1035, Sec. 4.1.1. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_512_D_KN)
nkb.ch/NS: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/NS: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (2a01:6980:aca9:100::21, 2a01:6980:aca9:100::22, UDP_-_NOEDNS_)
nkb.ch/NS: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
nkb.ch/SOA: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, TCP_-_EDNS0_4096_D)
nkb.ch/SOA: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D, UDP_-_EDNS0_4096_D_0x20)
nkb.ch/SOA: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, TCP_-_EDNS0_4096_D_N)
nkb.ch/SOA: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
nkb.ch/TXT: DNSSEC was effectively downgraded because the response had an invalid RCODE (FORMERR) with EDNS enabled. See RFC 6891, Sec. 7, RFC 2671, Sec. 5.3. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D)
nkb.ch/TXT: The response had an invalid RCODE (FORMERR) until the NSID EDNS option was removed. See RFC 6891, Sec. 6.1.2. (77.109.136.195, 91.194.196.36, 91.194.196.37, 2001:1620:20ad:200::37, UDP_-_EDNS0_4096_D_KN)
fmgec9k3qt.nkb.ch/A has errors; select the "Denial of existence" DNSSEC option to see them.
nkb.ch/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
nkb.ch/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (2)
fmgec9k3qt.nkb.ch/A has warnings; select the "Denial of existence" DNSSEC option to see them.
nkb.ch/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.