---
title: "No RRSIGs returned with \"dig +dnssec\""
slug: "aa-00205"
description: "Most likely, the zone is not signed."
updated: 2018-10-15T14:50:41Z
published: 2018-10-15T14:50:41Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.isc.org/llms.txt
> Use this file to discover all available pages before exploring further.

# I don't get RRSIG's returned when I use "dig +dnssec" - why is this?

Most likely, the domain is not signed.

If it is signed, then check whether DNSSEC has been disabled on the nameserver you are querying. In BIND 9, DNSSEC is enabled by default, but can be disabled with:

```
dnssec-enable no;
```

If this has been done, the server will not return RRSIG records.