Can't remember the way they ask for them, but even for sites with their own SSL it's always the same ip to SagePay

089.021.020.132 mask 255.255.255.255
089.021.020.133 mask 255.255.255.255
089.021.020.134 mask 255.255.255.255

Chris