esrf.fr
!Passed with warnings
26 passed
1 warning
0 failed
4 info
Registration
info.fr country-code · GIP RENATER · expires 2026-12-31
Found
- TLD
- .fr (country-code)
- ICANN policies apply
- no
- Registrar
- GIP RENATER
- Registered
- 31 December 1994
- Last changed
- 31 January 2026
- Expires
- 31 December 2026
- Status
- active
- Registry nameservers
- ext-dns-2.cern.ch, ns.esrf.fr, ns0.diamond.ac.uk, ns1.diamond.ac.uk
- RDAP server
- https://rdap.nic.fr/
Checks
-
i#1.fr is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
✓ Expires on 2026-12-31 #3
-
i#4No transfer lock
-
✓ Registry and delegation match #5
Delegation
infoext-dns-2.cern.ch, ns.esrf.fr, ns0.diamond.ac.uk, ns1.diamond.ac.uk
Found
- Parent zone
- fr
- Delegation from
- d.nic.fr (194.0.9.1)
- NS at the parent
- ext-dns-2.cern.ch, ns.esrf.fr, ns0.diamond.ac.uk, ns1.diamond.ac.uk
- NS in the zone
- ext-dns-2.cern.ch, ns.esrf.fr, ns0.diamond.ac.uk, ns1.diamond.ac.uk
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ext-dns-2.cern.ch | 192.91.245.85 2001:1458:1:2::100:85 | AS513 CERN - CERN - European Organization for Nuclear Research, CH AS513 CERN - CERN - European Organization for Nuclear Research, CH | - |
| ns.esrf.fr | 193.49.43.10 2001:660:530e:100::10 | AS2200 FR-RENATER - Renater, FR AS2200 FR-RENATER - Renater, FR | 193.49.43.10 2001:660:530e:100::10 |
| ns0.diamond.ac.uk | 193.62.221.97 | AS786 JANET - Jisc Services Limited, GB | - |
| ns1.diamond.ac.uk | 193.62.221.98 | AS786 JANET - Jisc Services Limited, GB | - |
Checks
-
✓ 4 nameservers #6
-
✓ Parent and zone agree #7
-
✓ Glue present and correct #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 3 autonomous systems #11
-
✓ Nameserver names under 3 TLDs #12
-
i#13Partly IPv6
Nameservers
info6 of 6 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ext-dns-2.cern.ch 192.91.245.85 | NOERROR, 17 ms, authoritative | no | yes / yes | refused | UNKNOWN |
| ext-dns-2.cern.ch 2001:1458:1:2::100:85 | NOERROR, 17 ms, authoritative | no | yes / yes | refused | UNKNOWN |
| ns.esrf.fr 193.49.43.10 | NOERROR, 21 ms, authoritative | no | yes / yes | refused | - |
| ns.esrf.fr 2001:660:530e:100::10 | NOERROR, 21 ms, authoritative | no | yes / yes | refused | - |
| ns0.diamond.ac.uk 193.62.221.97 | NOERROR, 22 ms, authoritative | no | yes / yes | refused | not available |
| ns1.diamond.ac.uk 193.62.221.98 | NOERROR, 23 ms, authoritative | no | yes / yes | refused | not available |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
passserial 1789479780 · primary ns.esrf.fr
Found
- Primary (MNAME)
- ns.esrf.fr
- Contact (RNAME)
- network.esrf.fr
- Serial
- 1789479780
- Refresh / retry
- 21600 s / 3600 s
- Expire
- 2419200 s
- Negative TTL
- 86400 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ext-dns-2.cern.ch (192.91.245.85) | 1789479780 |
| ext-dns-2.cern.ch (2001:1458:1:2::100:85) | 1789479780 |
| ns.esrf.fr (193.49.43.10) | 1789479780 |
| ns.esrf.fr (2001:660:530e:100::10) | 1789479780 |
| ns0.diamond.ac.uk (193.62.221.97) | 1789479780 |
| ns1.diamond.ac.uk (193.62.221.98) | 1789479780 |
Checks
-
✓ Serial 1789479780 everywhere #22
-
✓ Timers within recommendations #23
-
✓ Primary is a public nameserver #24
-
✓ Contact network@esrf.fr #25
-
✓ Timestamp serial #26
DNSSEC
warnNot signed
Found
- Validated by resolver
- no
Checks
-
!#27Not signed
Records
pass18 records at the apex
Found
- Read from
- 192.91.245.85:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns.esrf.fr. network.esrf.fr. 1789479780 21600 3600 2419200 86400 | 86400 |
| NS | ns1.diamond.ac.uk. | 86400 |
| NS | ext-dns-2.cern.ch. | 86400 |
| NS | ns.esrf.fr. | 86400 |
| NS | ns0.diamond.ac.uk. | 86400 |
| A | 193.49.43.164 | 86400 |
| MX | 10 mta1.epn-campus.eu. | 86400 |
| MX | 20 mta2.epn-campus.eu. | 86400 |
| TXT | "Foxit-domain-verification=0254f6f9f2bd9759f82fca7c45405a49" | 86400 |
| TXT | "v=spf1 mx ip4:193.49.43.81 ip4:193.49.43.82 ~all" | 86400 |
| TXT | "HARICA-edxHA9h9zULbuz3rFas" | 86400 |
| TXT | "adobe-idp-site-verification=89b8c4e81b550df6680343425ec36bcb321140a3c939074ccc18efabc7bdcd34" | 86400 |
| TXT | "apple-domain-verification=tuGzXtyitEVywvid" | 86400 |
| CAA | 0 issue "digicert.com" | 86400 |
| CAA | 0 iodef "mailto:network@esrf.fr" | 86400 |
| CAA | 0 issue "harica.gr" | 86400 |
| CAA | 0 issue "letsencrypt.org" | 86400 |
| CAA | 0 issue "sectigo.com" | 86400 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
✓ CAA restricts issuance #35