check_dnssec is a set of Nagios plugins to monitor DNSSEC services/zones. check_dnssec is based on ldns, a low-level DNS(SEC) library. check_dnssec_expiration checks if a domain is signed and the signature is not exited or expiring soon. check_dnssec_trace checks if a domain can trust traces from a domain with a trust-anchor. check_dnssec_trust_anchor checks if all trust anchors in a file are valid.