pypi.org

Observed Jul 21, 2026, 19:09 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Runs onFastly

Email byGoogle Workspace

Secured byGlobalSign

Also usesGoogle Search Console

IPv6 · 2 subdomains · languages

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat pypi.org actually stands on - every host below is a signed observation

pypi.org

A / AAAA

151.101.64.223151.101.128.223151.101.192.223151.101.0.223+4 more

Fastlyserves the site

ns-96.awsdns-12.comns-897.awsdns-48.netns-1264.awsdns-30.orgns-1702.awsdns-20.co.uk

awsdns-12.com + awsdns-48.net + moreanswers its DNS

aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.com+1 more

Google Workspacereceives its email

TLS

pypi.org

GlobalSign nv-saissued its certificate

DNS Records

A 4

151.101.64.223
151.101.128.223
151.101.192.223
151.101.0.223

AAAA 4

2a04:4e42::223
2a04:4e42:200::223
2a04:4e42:400::223
2a04:4e42:600::223

MX 5

1aspmx.l.google.com
5alt1.aspmx.l.google.com
5alt2.aspmx.l.google.com
10aspmx2.googlemail.com
10aspmx3.googlemail.com

TXT 4

google-site-verification=YdrllWIiutXFzqhEamHP4HgCoh88dTFzb2A6QFljooc
google-site-verification=ZI8zeHE6SWuJljW3f4csGetjOWo4krvjf13tdORsH4Y
v=spf1 include:_spf.google.com include:amazonses.com include:helpscoutemail.com -all
v=DMARC1; p=quarantine; pct=100; rua=mailto:re+c026728f02d6@inbound.dmarcdigests.com; fo=1; adkim=s; aspf=r

NS 4

ns-96.awsdns-12.com
ns-897.awsdns-48.net
ns-1264.awsdns-30.org
ns-1702.awsdns-20.co.uk

SOA 1

ns-1264.awsdns-30.org awsdns-hostmaster.amazon.com

CAA 4

iodef "mailto:infrastructure-staff@python.org"
issue "amazon.com"
issue "globalsign.com"
issue "letsencrypt.org"

TLS Certificates (2)

Common Name	Issuer	Expires
`pypi.org`	C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q4	Fri, 29 Jan 2027 04:33:07 +0000
`GlobalSign Atlas R3 DV TLS CA 2025 Q4`	2.5.4.11=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign	Fri, 16 Jul 2027 00:00:00 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for pypi.org. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/pypi.org">
  <img src="https://domaindrift.io/badge/pypi.org.svg"
       width="300" height="64" alt="DomainDrift signed observations for pypi.org">
</a>

Ed25519 Receipt

Receipt ID: rcpt_a41257ac34f37452
Output Hash: 62c90101ccf5ce19972838f162ff07f41b9c8e2ea5b02cc69065dc6fccdea5a3
Signature: ed25519:451217e325ebcd3d93e63e373544b183ce48f09bedc2e0797fd3e54005234bf0cc28af07359a241895b547c84ed87394a60c8994663d65940d2313092fc2100c
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/pypi.org