.ke

TLD SLA Compliance Monitoring

TLD SLA Compliance Metrics

Spec 10

DNS

Period Availability RTT Compliance RTT p50 RTT p95 Checks TSLAC
24h 100% 100% 112ms 404ms 235
7d 100% 100% 112ms 362ms 1350
30d 99.85% 99.85% 119ms 1125ms 7495

RDAP

Period Availability RTT Compliance RTT p50 RTT p95 Checks TSLAC
24h 5.00% 10.00% 59ms 8175ms 80
7d 27.08% 45.83% 277ms 1833ms 480
30d 24.85% 47.16% 259ms 1939ms 2680

DNSSEC Validation Metrics

Registry Agreement Spec 6

DNSSEC is required by the Registry Agreement (Specification 6) but is not part of the Spec 10 SLA. We monitor DNSSEC validation independently.

Period Validation Rate RTT p50 RTT p95 Checks Status
24h 48.48% 91ms 358ms 66
7d 49.44% 121ms 196ms 360
30d 49.65% 100ms 170ms 1996

Unlike Spec 10 services, DNSSEC has no formal availability SLA. Thresholds shown are operational guidelines.

Current Check Status

Reported by Any53 Probes
Type AF RTT Last Check Source Details Status TSLAC
DNS v4 1.4ms 1 minute ago local NSID: 1.ord.pch OK
DNS v6 212ms 1 minute ago local — OK
DNSSEC v4 24ms 46 minutes ago local Key: 17597 OK
DNSSEC v6 — 46 minutes ago local — FAIL
RDAP v4 10000ms 14 minutes ago local — FAIL
RDAP v6 0.48ms 14 minutes ago local — FAIL

RDAP HTTPS Timing

829ms total
DNS Lookup
—
TCP Connect
211ms
TLS Handshake
218ms
Time to First Byte
829ms

TLS 1.3 / TLS_AES_256_GCM_SHA384

Nameservers

5 IPs tested
Hostname IP Address AF ASN RPKI Status
kenic.anycastdns.cz 185.38.108.108 v4 AS60592
mzizi.kenic.or.ke 196.13.202.53 v4 — —
mzizi.kenic.or.ke 2001:43f8:10:0:50c0:a8ff:feee:30 v6 — —
ns-ke.afrinic.net 196.216.168.22 v4 — —
ns.anycast.kenic.or.ke 204.61.216.7 v4 — —

Per ICANN Spec 10, we test all delegated nameserver IPs independently.

Test With Your Computer

DNS

dig @kenic.anycastdns.cz ke. SOA +dnssec +nsid Query SOA with DNSSEC validation and NSID
drill -D ke. SOA @kenic.anycastdns.cz Alternative using drill with DNSSEC trace

RDAP

curl -sS "https://rdap.kenic.or.ke/domain/nic.ke" | jq . Fetch RDAP JSON (positive lookup)
curl -I -sS "https://rdap.kenic.or.ke/domain/nic.ke" Headers only (check TLS, timing)
Open in Browser View RDAP response directly

Registry Information

Active
TLD .ke
Operator Kenya
RDAP Server https://rdap.kenic.or.ke/ RDAP Client

ICANN SLA Requirements

Per ICANN Registry Agreement Specification 10:

DNS SLA UDP RTT ≤ 500ms for 95% of queries. Availability: 99% (max 432 min/month downtime).
RDAP SLA RTT ≤ 4000ms for 95% of queries. Availability: 98% (max 864 min/month downtime).

API Access

JSON API

Access .ke compliance metrics programmatically via our REST API.

Quick Start

GET /any53/api/v1/compliance/ke/ 
curl -H "X-API-Key: ${YOUR_API_KEY}" \
  "https://www.any53.com/any53/api/v1/compliance/ke/"

Example Response

{
  "tld": "ke",
  "display_name": ".ke",
  "operator": "Kenya",
  "updated_at": "2026-01-31T12:00:00Z",
  "dns": {
    "availability_24h": 99.99,
    "rtt_p50_ms": 12,
    "rtt_p95_ms": 42,
    "sla_threshold_ms": 500
  },
  "rdds": {
    "protocol": "RDAP",
    "availability_24h": 99.95,
    "rtt_p50_ms": 180,
    "rtt_p95_ms": 412,
    "sla_threshold_ms": 4000
  },
  "servers": {
    "rdap_url": "https://rdap.kenic.or.ke/",
    "whois_host": "whois.kenic.or.ke"
  },
  "spec10_compliant": true
}

Generate API Key

Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).

Endpoints

Endpoint Description Tier
GET /compliance/ List all monitored TLDs All
GET /compliance/{tld}/ Current metrics for a TLD All
GET /compliance/{tld}/history/ Historical time-series data Organization
GET /compliance/{tld}/probes/ Per-probe breakdown Organization
POST /compliance/keys/ Generate a new API key No auth

Rate Limits

Tier Rate Limit Features
Anonymous 100/hour Current snapshot, hourly aggregates
Verified 600/hour Current snapshot, hourly aggregates
Organization 6000/hour Historical data, per-minute resolution, per-probe breakdown

Enter a TLD name or IDN code • Browse all TLDs