.cern

TLD SLA Compliance Monitoring

TLD SLA Compliance Metrics

Spec 10

No metrics available yet

Metrics will appear after probes start reporting data. Check back in about an hour.

Current Check Status

Reported by Any53 Probes
Type AF RTT Last Check Source Details Status TSLAC
DNS v4 123ms 33 days, 14 hours ago local NSID: app5.nrt1.hosts.meta.re… OK
DNSSEC v4 122ms 33 days, 15 hours ago local — FAIL
DNSSEC v6 133ms 33 days, 15 hours ago local — FAIL
RDAP v4 94ms 33 days, 15 hours ago local TLS 1.3 OK
RDAP v6 96ms 33 days, 15 hours ago local TLS 1.3 OK

RDAP HTTPS Timing

96ms total
DNS Lookup
0.36ms
TCP Connect
2.2ms
TLS Handshake
13ms
Time to First Byte
96ms

TLS 1.3 / TLS_AES_128_GCM_SHA256

Nameservers

4 IPs tested
Hostname IP Address AF ASN RPKI Status
a0.nic.cern 65.22.224.1 v4 AS12041
a2.nic.cern 65.22.227.1 v4 AS207266
b0.nic.cern 65.22.225.1 v4 AS12041
c0.nic.cern 65.22.226.1 v4 AS12041

Per ICANN Spec 10, we test all delegated nameserver IPs independently.

Test With Your Computer

DNS

dig @a0.nic.cern cern. SOA +dnssec +nsid Query SOA with DNSSEC validation and NSID
drill -D cern. SOA @a0.nic.cern Alternative using drill with DNSSEC trace

RDAP

curl -sS "https://rdap.identitydigital.services/rdap/domain/nic.cern" | jq . Fetch RDAP JSON (positive lookup)
curl -I -sS "https://rdap.identitydigital.services/rdap/domain/nic.cern" Headers only (check TLS, timing)
Open in Browser View RDAP response directly

Registry Information

Active
TLD .cern
Operator European Organization for Nuclear Research ("CERN")
RDAP Server https://rdap.identitydigital.services/rdap/ RDAP Client

ICANN SLA Requirements

Per ICANN Registry Agreement Specification 10:

DNS SLA UDP RTT ≤ 500ms for 95% of queries. Availability: 99% (max 432 min/month downtime).
RDAP SLA RTT ≤ 4000ms for 95% of queries. Availability: 98% (max 864 min/month downtime).

API Access

JSON API

Access .cern compliance metrics programmatically via our REST API.

Quick Start

GET /any53/api/v1/compliance/cern/
curl -H "X-API-Key: ${YOUR_API_KEY}" \
  "https://www.any53.com/any53/api/v1/compliance/cern/"

Example Response

{
  "tld": "cern",
  "display_name": ".cern",
  "operator": "European Organization for Nuclear Research ("CERN")",
  "updated_at": "2026-01-31T12:00:00Z",
  "dns": {
    "availability_24h": 99.99,
    "rtt_p50_ms": 12,
    "rtt_p95_ms": 42,
    "sla_threshold_ms": 500
  },
  "rdds": {
    "protocol": "RDAP",
    "availability_24h": 99.95,
    "rtt_p50_ms": 180,
    "rtt_p95_ms": 412,
    "sla_threshold_ms": 4000
  },
  "servers": {
    "rdap_url": "https://rdap.identitydigital.services/rdap/"
  },
  "spec10_compliant": true
}

Generate API Key

Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).

Endpoints

Endpoint Description Tier
GET /compliance/ List all monitored TLDs All
GET /compliance/{tld}/ Current metrics for a TLD All
GET /compliance/{tld}/history/ Historical time-series data Organization
GET /compliance/{tld}/probes/ Per-probe breakdown Organization
POST /compliance/keys/ Generate a new API key No auth

Rate Limits

Tier Rate Limit Features
Anonymous 100/hour Current snapshot, hourly aggregates
Verified 600/hour Current snapshot, hourly aggregates
Organization 6000/hour Historical data, per-minute resolution, per-probe breakdown