CONTINUOUS INTERNET TELEMETRY24H DRIFT5,881 material changesacross 5,442 domains · last 24h · -4,534 vs yesterdayDNS DRIFT353 domains changed DNS providertop destination cloudflare.com · -306 vs yesterdayEMAIL DRIFT78 domains switched email providertop destination google.com · -89 vs yesterdayCERT DRIFT117 domains switched issuing CA24h · -102 vs yesterdayNOW452 curated domains not reachable-251 vs yesterdaySITE ERRORS17,342 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,626 sites429 rate-limit / 403 bot-block, a posture signal

ripn.net

Observed Jul 24, 2026, 02:59 UTC (8h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Runs onJoin-stock company _Internet Exchange_MSK-IX_
Registered withRegional Network Information Center, JSC dba RU-CENTER
tranco_1k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat ripn.net actually stands on - every host below is a signed observation
ripn.net
NS
a.dns.ripn.netb.dns.ripn.netd.dns.ripn.nete.dns.ripn.net+1 more
ripn.netanswers its DNS
MX
relay1.msk-ix.rurelay3.msk-ix.rurelay5.msk-ix.ru
msk-ix.rureceives its email

DNS Records

MX 3

  • 5relay1.msk-ix.ru
  • 5relay3.msk-ix.ru
  • 5relay5.msk-ix.ru

TXT 2

  • v=spf1 ip4:194.226.71.84 ip6:2001:6d0:ffd9:322:194:226:71:84 ip4:195.209.146.55 ip4:195.209.146.174 ip6:2001:6d0:ffd9:305:195:209:146:174 ip6:2001:6d0:ffd9:328:195:209:146:55 ip4:195.209.3.5 ip6:2001:6d0:ffff:100::2 ip4:195.209.14.26 ip4:194.226.69.16/28 ip4:194.226.65.249 ip4:194.190.148.184 ip4:194.226.76.132 ip4:194.226.74.7 ip6:2001:6d0:ffd9:330:194:226:76:132 ~all
  • v=DMARC1;p=none;rua=mailto:dmrcadm@ripn.net

NS 5

  • a.dns.ripn.net
  • b.dns.ripn.net
  • d.dns.ripn.net
  • e.dns.ripn.net
  • f.dns.ripn.net

SOA 1

  • ns.msk-ix.ru noc-dns.msk-ix.ru

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for ripn.net. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for ripn.net <a href="https://domaindrift.io/t/ripn.net"> <img src="https://domaindrift.io/badge/ripn.net.svg" width="300" height="64" alt="DomainDrift signed observations for ripn.net"> </a>

Ed25519 Receipt

Receipt ID
rcpt_edf4f118eb8526c2
Output Hash
098bc1e01607d69665c87cbd2e343f972169fe182d97d65b996d801393d54a40
Signature
ed25519:09826c685ce1b7967ce8e913cac886db8037726c5fbccda480a56bf7e07cc437796ad7f17799ab19ef5fab6a7156405b32b7dbbb77848bc6a3203c35c1458003
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser