A formal model of the ETCS Level 2 compatible interlocking systems. The model accommodates the complexity of the sequential release feature. A scalable verification technique for safety properties for industrial size networks. Experimental verification results for real networks of the Danish Signalling Programme. Benchmarking experiments comparing our BMC approach with other techniques.