mumc.nl
!Passed with warnings
28 passed
1 warning
0 failed
6 info
Registration
info.nl country-code · SURF B.V.
Found
- TLD
- .nl (country-code)
- ICANN policies apply
- no
- Registrar
- SURF B.V.
- Registered
- 31 May 2005
- Last changed
- 9 May 2025
- Status
- active
- Registry nameservers
- ns1.surfnet.nl, ns1.zurich.surf.net, ns11.mumc.nl, ns12.mumc.nl, ns3.surfnet.nl
- RDAP server
- https://rdap.sidn.nl/
Checks
-
i#1.nl is a country-code TLD (ccTLD)
-
✓ TLD delegated and signed #2
-
i#3Expiry date not published
-
i#4No transfer lock
-
✓ Registry and delegation match #5
Delegation
infons1.surfnet.nl, ns1.zurich.surf.net, ns11.mumc.nl, ns12.mumc.nl, ns3.surfnet.nl
Found
- Parent zone
- nl
- Delegation from
- ns1.dns.nl (194.0.28.53)
- NS at the parent
- ns1.surfnet.nl, ns1.zurich.surf.net, ns11.mumc.nl, ns12.mumc.nl, ns3.surfnet.nl
- NS in the zone
- ns1.surfnet.nl, ns1.zurich.surf.net, ns11.mumc.nl, ns12.mumc.nl, ns3.surfnet.nl
| Nameserver | Addresses | Network (AS) | Glue |
|---|---|---|---|
| ns1.surfnet.nl | 192.87.106.101 2001:610:1:800a:192:87:106:101 | AS1103 SURFNET-NL - SURF B.V., NL AS1103 SURFNET-NL - SURF B.V., NL | 192.87.106.101 2001:610:1:800a:192:87:106:101 |
| ns1.zurich.surf.net | 195.176.255.9 2001:620:0:9::1103 | AS559 Switch - SWITCH, CH AS559 Switch - SWITCH, CH | - |
| ns11.mumc.nl | 145.29.134.153 | AS1103 SURFNET-NL - SURF B.V., NL | 145.29.134.153 |
| ns12.mumc.nl | 145.29.134.154 | AS1103 SURFNET-NL - SURF B.V., NL | 145.29.134.154 |
| ns3.surfnet.nl | 195.169.124.71 2001:610:0:800c:195:169:124:71 | AS1103 SURFNET-NL - SURF B.V., NL AS1103 SURFNET-NL - SURF B.V., NL | 195.169.124.71 2001:610:0:800c:195:169:124:71 |
Checks
-
✓ 5 nameservers #6
-
✓ Parent and zone agree #7
-
✓ Glue present and correct #8
-
✓ All names resolve #9
-
✓ Nameservers in different networks #10
-
✓ 2 autonomous systems #11
-
✓ Nameserver names under 2 TLDs #12
-
i#13Partly IPv6
Nameservers
info8 of 8 addresses answer authoritatively
Found
| Nameserver | Answer | Recursion | TCP / EDNS | AXFR | Version |
|---|---|---|---|---|---|
| ns1.surfnet.nl 192.87.106.101 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns1.surfnet.nl 2001:610:1:800a:192:87:106:101 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns1.zurich.surf.net 195.176.255.9 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surf.nl |
| ns1.zurich.surf.net 2001:620:0:9::1103 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surf.nl |
| ns11.mumc.nl 145.29.134.153 | NOERROR, 15 ms, authoritative | no | yes / yes | refused | - |
| ns12.mumc.nl 145.29.134.154 | NOERROR, 16 ms, authoritative | no | yes / yes | refused | - |
| ns3.surfnet.nl 195.169.124.71 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
| ns3.surfnet.nl 2001:610:0:800c:195:169:124:71 | NOERROR, 10 ms, authoritative | no | yes / yes | refused | This is a SURFnet nameserver - dns-beheer@surfnet.nl |
Checks
-
✓ All respond #14
-
✓ All authoritative #15
-
✓ No recursion #16
-
i#17Identifying string disclosed
-
✓ Zone transfers refused #18
-
✓ TCP supported #19
-
✓ EDNS supported #20
-
✓ Public addresses #21
SOA
passserial 2016126034 · primary ns11.mumc.nl
Found
- Primary (MNAME)
- ns11.mumc.nl
- Contact (RNAME)
- infomisns.mumc.nl
- Serial
- 2016126034
- Refresh / retry
- 14400 s / 3600 s
- Expire
- 1209600 s
- Negative TTL
- 86400 s
Serial per nameserver
| Nameserver | Serial |
|---|---|
| ns1.surfnet.nl (192.87.106.101) | 2016126034 |
| ns1.surfnet.nl (2001:610:1:800a:192:87:106:101) | 2016126034 |
| ns1.zurich.surf.net (195.176.255.9) | 2016126034 |
| ns1.zurich.surf.net (2001:620:0:9::1103) | 2016126034 |
| ns11.mumc.nl (145.29.134.153) | 2016126034 |
| ns12.mumc.nl (145.29.134.154) | 2016126034 |
| ns3.surfnet.nl (195.169.124.71) | 2016126034 |
| ns3.surfnet.nl (2001:610:0:800c:195:169:124:71) | 2016126034 |
Checks
-
✓ Serial 2016126034 everywhere #22
-
✓ Timers within recommendations #23
-
✓ Primary is a public nameserver #24
-
✓ Contact infomisns@mumc.nl #25
-
✓ Timestamp serial #26
DNSSEC
warnSigned, DS published at parent
Found
- Validated by resolver
- yes
- Denial of existence
- NSEC3
- NSEC3
- 0 iterations, 0-byte salt
- Signatures valid until
- 26 October 2026
DS at the parent
| Key tag | Algorithm | Digest | Matches a key |
|---|---|---|---|
| 54467 | RSASHA256 (8) | SHA256 47CA1930A5D42DEE… | yes |
| 24500 | RSASHA256 (8) | SHA256 D19AC5708FDACF08… | yes |
DNSKEY in the zone
| Key tag | Role | Algorithm |
|---|---|---|
| 15148 | ZSK (256) | RSASHA256 (8) |
| 43623 | ZSK (256) | RSASHA256 (8) |
| 54467 | KSK (257) | RSASHA256 (8) |
| 24500 | KSK (257) | RSASHA256 (8) |
Checks
-
✓ Signed and validated #27
-
✓ DS matches a key #28
-
✓ Modern algorithms #29
-
!#30Signatures expire soon
-
✓ NSEC3 as recommended #31
Records
info22 records at the apex
Found
- Read from
- 192.87.106.101:53
| Type | Value | TTL |
|---|---|---|
| SOA | ns11.mumc.nl. infomisns.mumc.nl. 2016126034 14400 3600 1209600 86400 | 3600 |
| NS | ns1.zurich.surf.net. | 86400 |
| NS | ns1.surfnet.nl. | 86400 |
| NS | ns11.mumc.nl. | 86400 |
| NS | ns3.surfnet.nl. | 86400 |
| NS | ns12.mumc.nl. | 86400 |
| A | 31.7.4.35 | 86400 |
| AAAA | 2a03:9700:8000:4::16 | 86400 |
| MX | 5 mumc-nl.m-v1.mx.microsoft. | 86400 |
| TXT | "utK7HXJ90W3UM5K+S6rP10OuVt6/M18gXWY1/FNPO9g=" | 86400 |
| TXT | "e604fbe7-a730-4588-998c-549c212d7486-10102019" | 86400 |
| TXT | "atlassian-domain-verification=flOlHEGsbYdzqlzKAhdR7EEiiBKT8qgKO6gGcV3pFy4iaYaPqIj1xoKG0yKQ0Gjy" | 86400 |
| TXT | "apple-domain-verification=9RzDGRDVv1lt8Lvi" | 86400 |
| TXT | "pexip-ms-tenant-domain-verification=0a9b5bc6-4d78-4466-b9ca-d5d0ea95514b" | 86400 |
| TXT | "HARICA-WU8cJ9FNlh0c1fACEWg" | 86400 |
| TXT | "ciscocidomainverification=2e3a4d56f864bf3998c34b28d8306ed9bbe51a286ba591c4afb6e5dfbc41ba44" | 86400 |
| TXT | "v=spf1 include:spf.mumc.nl include:spf.protection.outlook.com include:_spf.createsend.com include:spf.micros.nl include:spf.afas.online include:_spf.zorgmail.nl include:_spf.timeforstorm.eu a -all" | 86400 |
| TXT | "\"69wO3ImohEPc8Bc2QnbzVhTPzW7KbxgeC39e7iPrzCY=\" " | 86400 |
| TXT | "pexip-portal-domain-verification=0a9b5bc6-4d78-4466-b9ca-d5d0ea95514b" | 86400 |
| TXT | "e+0fELsy5NR5gWtaXR60/zes7qUCFnuyyC7XjC+YkcbzB7lb08dGB7EUN2ZVQvgFKYsgumVwGpH/yz4ZMTwLEw==" | 86400 |
| TXT | "meIq/q1fNym3kEX8vjPan/8x6IbBmRvSONN8ssurHkJHVWMtwunL1/2V889hhZn02D5KIimHDvcvhw5OU0mOcQ==" | 86400 |
| TXT | "JNQ1FR8dRDO+j2fJcL29+g+AKvTFOm6RajzLKVMaPLM=" | 86400 |
Checks
-
✓ TTLs within range #32
-
✓ No CNAME at the apex #33
-
✓ No wildcard #34
-
i#35No CAA records