Cook Islands — Pacific Islands IPv6 Monitor

Total Domains22

DNS (operational)22

Mail (operational)15

Web (operational)21

DNSSEC22

Economy score33.0%

IPv6 pref. %57.45%

BGP networks (routing visibility)

Combines Hurricane Electric BGP route visibility with per-ASN IPv6 preferred from APNIC Labs for economy CK. Rows on HE are green only when IPv6 routes are announced; red when IPv4-only (even if APNIC shows some IPv6 preference). ASNs listed only by APNIC (HE columns N/A) are colored by IPv6 preferred and may not be connected to other ASNs in this economy.

BGP and APNIC per-ASN data for Cook Islands (CK). Hurricane Electric. APNIC Labs stats.

AS14593	SPACEX-STARLINK - Space Exploration Technologies Corporation	64.99%	N/A	N/A	N/A	100%	valid (10/10 valid)
AS10131	Telecom Cook Islands	0.05%	18	0	No	100%	valid (10/10 valid)
AS152093	VakaNet Limited	99.40%	1	1	Yes	0%	unknown (0/2 valid)
AS13335	CLOUDFLARENET - Cloudflare, Inc.	0.00%	N/A	N/A	N/A	80%	invalid (8/10 valid)
AS36183	AKAMAI-AS - Akamai Technologies, Inc.	0.00%	N/A	N/A	N/A	100%	valid (10/10 valid)

Hurricane Electric snapshot 2026-06-22 22:55 UTC (bgp.he.net). APNIC Labs per-ASN snapshot 2026-06-22 22:55 UTC (stats.labs.apnic.net). RPKI columns use RIPEstat on a sample of announced prefixes (not exhaustive ROA coverage).

Detailed IPv6 & DNSSEC Service Interface Statistics

				DNS	Mail	Web	DNSSEC
btib.gov.ck	Business Trade and Investment Board	Government	2	[2] 6/6/6 [O]	[5 MX] v4 smtp 5/5/5 v6 smtp 5/5/5 [O]	[1] 0/0/0 [I]	U/-/-	No record
ci-ceit.edu.ck	Cook Islands Centre of Excellence in Information Technology	Education	1	[3] 3/3/3 [O]	[0] -/-/- [-]	[1] 0/0/0 [I]	U/-/-	No record
ck	Government of the Cook Islands	Government	0	[4] 0/0/0 [M]	[0] -/-/- [-]	[1] 0/0/0 [I]	U/-/-	No record
crownlawcookislands.co.ck	Crown Law Office	Government	0	[2] 0/0/0 [O]	[0] -/-/- [-]	[1] 0/0/0 [I]	U/-/-	No record
education.gov.ck	Ministry of Education	Government	1	[3] 0/0/0 [O]	[1 MX] v4 smtp 4/4/4 v6 smtp 4/4/4 [O]	[1] 0/0/0 [I]	U/-/-	quarantine
emci.gov.ck	Emergency Management Cook Islands	Government	0	[2] 0/0/0 [O]	[1 MX] v4 smtp 1/1/1 v6 smtp 0/0/0 [I]	[1] 0/0/0 [I]	U/-/-	No record
health.gov.ck	Te Marae Ora (Ministry of Health)	Government	3	[2] 2/2/2 [O]	[2 MX] v4 smtp 2/2/2 v6 smtp 2/2/2 [O]	[1] 2/2/2 [I]	U/-/-	none
ici.gov.ck	Ministry of Infrastructure Cook Islands	Government	1	[2] 6/6/6 [O]	[0] -/-/- [-]	[1] 0/0/0 [I]	U/-/-	No record
intaff.gov.ck	Ministry of Internal Affairs	Government	2	[2] 6/6/6 [O]	[3 MX] v4 smtp 3/3/3 v6 smtp 0/0/0 [O]	[1] 2/2/2 [I]	U/-/-	No record
justice.gov.ck	Ministry of Justice	Government	1	[2] 0/0/0 [O]	[5 MX] v4 smtp 5/5/5 v6 smtp 5/5/5 [O]	[1] 0/0/0 [I]	U/-/-	No record
kukinet.co.ck	Kuk i Net	Telecommunications	1	[2] 0/0/0 [O]	[5 MX] v4 smtp 5/5/5 v6 smtp 5/5/5 [O]	[1] 0/0/0 [I]	U/-/-	No record
maraemoana.gov.ck	Marae Moana Cook Islands Marine Park	Government	2	[2] 6/6/6 [O]	[0] -/-/- [-]	[1] 2/2/2 [I]	U/-/-	No record
mfai.gov.ck	Ministry of Foreign Affairs and Immigration	Government	3	[2] 6/6/6 [O]	[1 MX] v4 smtp 4/4/4 v6 smtp 4/4/4 [O]	[1] 3/3/3 [I]	U/-/-	quarantine
mfem.gov.ck	Ministry of Finance and Economic Management	Government	2	[2] 0/0/0 [O]	[1 MX] v4 smtp 1/1/1 v6 smtp 1/1/1 [O]	[1] 0/0/0 [I]	S/?/? (partial)	No record
mmr.gov.ck	Ministry of Marine Resources	Government	1	[2] 0/0/0 [O]	[1 MX] v4 smtp 3/3/3 v6 smtp 3/3/3 [O]	[1] 0/0/0 [I]	U/-/-	No record
parliament.gov.ck	Parliament of the Cook Islands	Government	1	[2] 0/0/0 [O]	[5 MX] v4 smtp 5/5/5 v6 smtp 5/5/5 [O]	[1] 0/0/0 [I]	U/-/-	No record
pmoffice.gov.ck	Office of the Prime Minister	Government	1	[2] 0/0/0 [O]	[5 MX] v4 smtp 5/5/5 v6 smtp 5/5/5 [O]	[1] 0/0/0 [I]	U/-/-	No record
psc.gov.ck	Office of the Public Service Commissioner	Government	1	[2] 0/0/0 [O]	[1 MX] v4 smtp 4/4/4 v6 smtp 4/4/4 [O]	[1] 0/0/0 [I]	U/-/-	No record
sbma.gov.ck	Cook Islands Seabed Minerals Authority	Government	1	[2] 0/0/0 [O]	[6 MX] v4 smtp 6/6/6 v6 smtp 6/6/6 [O]	[0] error: Get "https://www.sbma.gov.ck/": tls: failed to verify certificate: x509: certificate is valid for .squarespace.com, squarespace.com, .campaign-preferences.com, campaign-preferences.com, .sqsp.net, sqsp.net, .sqspcdn.com, static1.1.sqspcdn.com, static2.1.sqspcdn.com, static1.2.sqspcdn.com, cdn1.1.sqspcdn.com, sqspcdn.com, *.engage.squarespace-mail.com, engage.squarespace-mail.com, not www.sbma.gov.ck	U/-/-	No record
stats.gov.ck	Cook Islands Statistics Office	Government	2	[2] 6/6/6 [O]	[0] -/-/- [-]	[1] 2/2/2 [I]	U/-/-	No record
transport.gov.ck	Ministry of Transport	Government	2	[2] 6/6/6 [O]	[0] -/-/- [-]	[1] 2/2/2 [I]	U/-/-	No record
vodafone.co.ck	Vodafone Cook Islands	Telecommunications	1	[3] 0/0/0 [O]	[5 MX] v4 smtp 4/4/4 v6 smtp 4/4/4 [O]	[1] 0/0/0 [I]	U/-/-	No record

Want to suggest a new domain? Submit a pull request for those files in config/domains.

How to Read Results

Each test cell combines a color status and a compact technical summary. The notes below explain both in plain language.

Status and points

IPv4-only No IPv6 operational path observed for this test result. (0 points per column)
Dual-stack Both IPv4 and IPv6 paths are present; IPv6 is available with IPv4. (1 point per column)
IPv6-only IPv6 path is operational for this test result. (1 point per column)
Unknown Measurement was not conclusive or the test was not available. (0 points per column)

Per-test output format

DNS

Format: [NS count] v6 configured/reachable/operational [location]

Meaning: Shows how many authoritative name servers exist, and how many IPv6 endpoints are configured, responsive, and operational.

Configured/Reachable/Operational maps to DNS server endpoints discovered from NS records.
Location tags indicate hosting locality context for the tested domain.

Mail

Format: [MX count] v4 smtp configured/reachable/operational v6 smtp configured/reachable/operational [location]

Meaning: Shows MX footprint and SMTP health per IP family. Operational means an SMTP banner and EHLO exchange succeeded on port 25.

v4 and v6 SMTP are measured separately.
MX presence without successful SMTP handshake can still produce non-operational results.

Web

Format: [site count] v6 configured/reachable/operational [location]

Meaning: Shows IPv6 web endpoint readiness for the discovered HTTPS host. Operational means family-specific HTTPS requests complete successfully.

Configured/Reachable are derived from discovered A/AAAA records on the final web host.
Operational reflects request success by family (tcp4 and tcp6 tested separately).

DNSSEC

Format: S/?/? (partial), U/-/-, or error text

Meaning: Shows whether DNSKEY data is observed at the apex (signed), absent (unsigned), or unavailable due to lookup error.

S/?/? (partial) indicates partial DNSSEC signal only.
Full chain validation is not yet performed by this checker.

DMARC

Format: policy or p=…, sp=…

Meaning: Published DMARC policy at _dmarc.{domain} (DNS TXT). Shows organizational policy (p=) and subdomain policy (sp=) when set.

No record (NXDOMAIN or no DMARC TXT) scores 0% on the ramp (red).
p=none scores 25%; quarantine 75%; reject 100%. Stricter of p and sp drives the color.
Lookup failures (timeout, SERVFAIL) show grey — not scored as absent.
Does not measure SPF/DKIM pass rates — policy publication only.

Location tag key

[I] Inside: Service hostname is the tested domain or a subdomain under it.
[P] Parent-related: Service hostname resolves via a parent/suffix relationship to the tested domain.
[O] Outside: Service hostname is outside the tested domain suffix.
[M] Mixed: Multiple service hosts span more than one location class.
[-] Not available: No location could be derived from the observed data.

How score is built

Row score: 0-4 points. Row score = DNS + Mail + Web + DNSSEC, where each column contributes 0 or 1 point.

IPv4-only: 0 points
Dual-stack: 1 point
IPv6-only: 1 point
Unknown: 0 points

DNSSEC uses signed=1 point; unsigned, error, and unknown=0 points.

Economy score: Economy deployment score (%) = average(RowScore/4) across domains x 100.

Row score does not include DMARC or RPKI in v1; those columns use the same 0–100% red→green ramp as IPv6 preferred %.

DMARC ramp (domain table)

No DMARC record: 0% — No _dmarc TXT at the domain apex (NXDOMAIN or no v=DMARC1 in answers).
Lookup failed: grey — DNS timeout or non-NXDOMAIN error; use the dmarcian link to re-check.
p=none (monitoring): 25% — Record published; organizational policy is none.
quarantine: 75% — Stricter of p= and sp= is quarantine.
reject: 100% — Stricter of p= and sp= is reject.

RPKI ramp (BGP table)

RPKI %: 0–100% — Share of sampled prefixes RIPEstat marked valid (e.g. 8/10 → 80%). Invalid and unknown prefixes lower the percentage.
RPKI status: text — Worst result in the sample (valid, invalid, or unknown) with counts — use the link for RIPEstat details.
No data: grey — RIPEstat error, no prefixes, or not yet collected.