diff --git a/tests-extra/tests/basic/opt-out/test.py b/tests-extra/tests/basic/opt-out/test.py
index 542e9a133ed20180cb58dc7c00f17452580821d1..af2634f2f0b979f6083ea95740c985a469838edd 100644
--- a/tests-extra/tests/basic/opt-out/test.py
+++ b/tests-extra/tests/basic/opt-out/test.py
@@ -44,7 +44,10 @@ resp.cmp(bind)
 # B5. Wildcard No Data Error.
 resp = knot.dig("a.z.w.example.", "AAAA", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
-resp.cmp(bind)
+# @note Commented out because BIND9 (as of 9.9.4) does not return
+#       a closest encloser wildcard NSEC3 RR.
+#       See RFC5155 appendix B.5, page 46
+#resp.cmp(bind)
 
 # B6. DS Child Zone No Data Error.
 resp = knot.dig("example.", "DS", dnssec=True)