.safe SLA Compliance

TLD SLA Compliance Metrics

Spec 10

DNS

Period	Availability	RTT Compliance	RTT p50	RTT p95	Checks
24h	100%	100%	19ms	92ms	96
7d	100%	100%	19ms	139ms	2832
30d	95.00%	95.00%	19ms	157ms	3682

RDAP

Period	Availability	RTT Compliance	RTT p50	RTT p95	Checks
24h	100%	100%	292ms	346ms	4
7d	100%	100%	283ms	372ms	216
30d	100%	100%	285ms	391ms	300

DNSSEC Validation Metrics

Registry Agreement Spec 6

DNSSEC is required by the Registry Agreement (Specification 6) but is not part of the Spec 10 SLA. We monitor DNSSEC validation independently.

Period	Validation Rate	RTT p50	RTT p95	Checks
24h	100%	38ms	102ms	8
7d	100%	38ms	107ms	130
30d	100%	39ms	106ms	187

Unlike Spec 10 services, DNSSEC has no formal availability SLA. Thresholds shown are operational guidelines.

Current Check Status

Reported by Any53 Probes

Type	AF	RTT	Last Check	Source	Details	Status
`DNS`	v4	1.5ms	4 hours, 45 minutes ago	local	NSID: u-ci-nominet1.uschi1.	OK
`DNS`	v6	1.4ms	4 hours, 45 minutes ago	local	NSID: u-ci-nominet2.uschi1.	OK
`DNSSEC`	v4	39ms	1 hour, 16 minutes ago	local	Key: 25204	OK
`DNSSEC`	v6	102ms	1 hour, 16 minutes ago	local	Key: 25204	OK
`RDAP`	v4	293ms	3 hours, 22 minutes ago	local	TLS 1.3	OK
`RDAP`	v6	297ms	3 hours, 22 minutes ago	local	TLS 1.3	OK

RDAP HTTPS Timing

297ms total

DNS Lookup

—

TCP Connect

83ms

TLS Handshake

93ms

Time to First Byte

296ms

TLS 1.3 / TLS_AES_128_GCM_SHA256

Nameservers

16 IPs tested

Hostname	IP Address	AF
`dns1.nic.safe`	`213.248.218.78`	v4
`dns1.nic.safe`	`2a01:618:402::78`	v6
`dns2.nic.safe`	`103.49.82.78`	v4
`dns2.nic.safe`	`2401:fd80:402::78`	v6
`dns3.nic.safe`	`213.248.222.78`	v4
`dns3.nic.safe`	`2a01:618:406::78`	v6
`dns4.nic.safe`	`43.230.50.78`	v4
`dns4.nic.safe`	`2401:fd80:406::78`	v6
`dnsa.nic.safe`	`156.154.100.3`	v4
`dnsa.nic.safe`	`2001:502:ad09::3`	v6
`dnsb.nic.safe`	`156.154.101.3`	v4
`dnsb.nic.safe`	`2001:502:2eda::3`	v6
`dnsc.nic.safe`	`156.154.102.3`	v4
`dnsc.nic.safe`	`2610:a1:1009::3`	v6
`dnsd.nic.safe`	`156.154.103.3`	v4
`dnsd.nic.safe`	`2610:a1:1010::3`	v6

Per ICANN Spec 10, we test all delegated nameserver IPs independently.

Test With Your Computer

DNS

dig @dns1.nic.safe safe. SOA +dnssec +nsid Query SOA with DNSSEC validation and NSID

drill -D safe. SOA @dns1.nic.safe Alternative using drill with DNSSEC trace

RDAP

curl -sS "https://rdap.nominet.uk/safe/domain/nic.safe" | jq . Fetch RDAP JSON (positive lookup)

curl -I -sS "https://rdap.nominet.uk/safe/domain/nic.safe" Headers only (check TLS, timing)

Open in Browser View RDAP response directly

Registry Information

Active

TLD .safe

Operator Amazon Registry Services, Inc.

RDAP Server https://rdap.nominet.uk/safe/ RDAP Client

ICANN SLA Requirements

Per ICANN Registry Agreement Specification 10:

DNS SLA UDP RTT ≤ 500ms for 95% of queries. Availability: 99% (max 432 min/month downtime).

RDAP SLA RTT ≤ 4000ms for 95% of queries. Availability: 98% (max 864 min/month downtime).

API Access

JSON API

Access .safe compliance metrics programmatically via our REST API.

Quick Start

GET /any53/api/v1/compliance/safe/

curl -H "X-API-Key: ${YOUR_API_KEY}" \
  "https://www.any53.com/any53/api/v1/compliance/safe/"

Example Response

{
  "tld": "safe",
  "display_name": ".safe",
  "operator": "Amazon Registry Services, Inc.",
  "updated_at": "2026-01-31T12:00:00Z",
  "dns": {
    "availability_24h": 99.99,
    "rtt_p50_ms": 12,
    "rtt_p95_ms": 42,
    "sla_threshold_ms": 500
  },
  "rdds": {
    "protocol": "RDAP",
    "availability_24h": 99.95,
    "rtt_p50_ms": 180,
    "rtt_p95_ms": 412,
    "sla_threshold_ms": 4000
  },
  "servers": {
    "rdap_url": "https://rdap.nominet.uk/safe/"
  },
  "spec10_compliant": true
}

Generate API Key

Get a free API key to start making requests. Provide an email to upgrade to the verified tier (600 requests/hour).

Endpoints

Endpoint	Description	Tier
`GET /compliance/`	List all monitored TLDs	All
`GET /compliance/{tld}/`	Current metrics for a TLD	All
`GET /compliance/{tld}/history/`	Historical time-series data	Organization
`GET /compliance/{tld}/probes/`	Per-probe breakdown	Organization
`POST /compliance/keys/`	Generate a new API key	No auth

Rate Limits

Tier	Rate Limit	Features
Anonymous	100/hour	Current snapshot, hourly aggregates
Verified	600/hour	Current snapshot, hourly aggregates
Organization	6000/hour	Historical data, per-minute resolution, per-probe breakdown