NSEC3DIG(1) PowerDNS Authoritative Server NSEC3DIG(1)

# [NAME](#NAME)

nsec3dig - Show and validate NSEC3 proofs

# [SYNOPSIS](#SYNOPSIS)

**nsec3dig** *IPADDRESS* *PORT* *QNAME* *QTYPE* \[recurse]

# [DESCRIPTION](#DESCRIPTION)

**nsec3dig** sends a query for *QNAME* and *QTYPE* to the nameserver at *IPADDRESS* on port *PORT* and prints whether and why the NSEC3 proofs are correct. Using the 'recurse' option sets the Recursion Desired (RD) bit in the query.

# [EXAMPLE](#EXAMPLE)

**nsec3dig 8.8.8.8 53 doesnotexist.isoc.nl TXT recurse**

# [AUTHOR](#AUTHOR)

PowerDNS.COM BV

# [COPYRIGHT](#COPYRIGHT)

PowerDNS.COM BV

October 2, 2026

---

Document: nsec3dig(1) from pdns-5.2 5.2.13-r6 (Chainguard OS)
Source: https://github.com/PowerDNS/pdns