diff --git a/src/knot/nameserver/nsec_proofs.c b/src/knot/nameserver/nsec_proofs.c
index a3a462445768ba9cf150d8073c7c65d850b5b2ff..9c7fd02d1259585e8a450065b3f14282794e2df8 100644
--- a/src/knot/nameserver/nsec_proofs.c
+++ b/src/knot/nameserver/nsec_proofs.c
@@ -544,7 +544,8 @@ dbg_ns_exec_verb(
 
 	if (prev_new != previous) {
 		rrset = knot_node_get_rrset(prev_new, KNOT_RRTYPE_NSEC);
-		if (rrset == NULL || knot_rrset_rdata_rr_count(rrset) == 0) {
+		rrsigs = knot_node_get_rrset(prev_new, KNOT_RRTYPE_RRSIG);
+		if (rrset == NULL) {
 			// bad zone, ignore
 			return KNOT_EOK;
 		}