Riseup VPN
riseup.net · 4 records in Debrid, Egress and tunnels, IP and proxies · JSON
Records 4
- caveatRiseup VPN, free (donations)
Egress and tunnelsfree tieridentity anonymousno cardevidence documentedstale on 2026-12-05
- caveatRiseupVPN
IP and proxiesfree tieridentity anonymousno cardevidence documentedstale on 2026-12-05duplicate
- caveatRiseup VPN (exit addresses)
IP and proxiesfree tieridentity anonymousno cardevidence documentedstale on 2026-12-05
- fails: quotaRiseup Share
Debrididentity anonymousno cardlimit retention-clampedevidence documentedstale on 2026-12-04
Riseup VPN, free (donations)
Egress and tunnels- Free allowance
- Free to use with no account: 'You just install it and run it—no configuration, no account registration.' The service is donation-funded: 'The cost for us to offer RiseupVPN is approximately $60 USD per person per year', and users are asked to donate at least that.
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented9 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05
| Free tier | Free to use with no account: 'You just install it and run it—no configuration, no account registration.' The service is donation-funded: 'The cost for us to offer RiseupVPN is approximately $60 USD per person per year', and users are asked to donate at least that. The cheapest yearly price is therefore USD 0; the suggested donation is USD 60. unit unlimited; metered on none; No byte or time quota is stated on the pages read, and the published service configuration marks each of its 21 gateways as 'limited': false; that flag's meaning is not documented on the pages read, so the unit unlimited is an absence of a stated quota, not a vendor promise. |
|---|---|
| Price | USD 0; a suggested donation of USD 60 a year; not a per-TB price |
| Limits |
The pages read state no byte quota, device count or rate. The service has no account, so no per-account limit can be enforced by a login. |
| Binding | none No quota or rate is published and no account exists to enforce one; the open question is capacity (a donation-funded service with 21 gateways), which the limit vocabulary does not name. |
| Identity | anonymous No account: 'no configuration, no account registration'. The vendor states it does not log the user's IP address. Donations are optional and go through Liberapay (card or Euro bank debit), PayPal or Bitcoin. |
| Egress | No byte cap or rate is stated on the pages read. All 21 gateways in the published service configuration carry 'limited': false. The help page says RiseupVPN 'bypasses these restrictions and, because you get your own IP, makes p2p applications work much better'. free allowance: free to use; no quota stated |
| Retention | not applicable: a tunnel, not stored bytes |
| Interface | cli A tunnel with desktop and Android apps (RiseupVPN, built on the Bitmask code) and a published JSON service configuration. Protocols: OpenVPN (AES-256-GCM) on every gateway. UDP: yes, on ports 53, 80 and 1194 in both TCP and UDP. Port forwarding: unverified: no page read states it. SOCKS5: unverified: no page read states a SOCKS5 endpoint. Obfuscation: obfs4 over TCP port 443 on every gateway. BitTorrent: the legacy help page lists p2p as a use the VPN supports; no current page states a rule. |
| Tooling | The RiseupVPN app, or a plain OpenVPN client using the gateways, ports and cipher in the vendor's published service configuration (21 gateways, each with openvpn and obfs4 transports). |
| Composes with | A free tunnel exit: traffic leaves from the address of one of 21 gateways, so the upstream sees a shared hosting-network address. |
| Reliability | A donation-funded service run as 'an experiment to see if we can create a VPN service that is easy enough for everyone to use and that people will donate enough to sustain'; capacity and continuity depend on donations. |
| Notes | Cheapest yearly price: USD 0 (donation-funded). The published service configuration lists 21 gateways, each offering OpenVPN on ports 53, 80 and 1194 over TCP and UDP and obfs4 on TCP 443. |
| Evidence note | documented Documented for price, sign-up and the BitTorrent line; the protocol, UDP and obfuscation values are measured from the vendor's published service configuration (a probe of the JSON, status 200). The BitTorrent line comes from a legacy help page of unknown date, so it is the weakest value. Nothing was connected through the service. |
| Parsed numbers |
|
Evidence 9
| date | source | what it proved |
|---|---|---|
| 2026-11-04 | riseup.net/en/vpn | no account is needed to use RiseupVPN |
| 2026-11-04 | riseup.net/en/vpn | part of the text of Free tier, above |
| 2026-11-04 | riseup.net/en/vpn | The vendor's stated cost per user per year is USD 60. |
| 2026-11-04 | riseup.net/en/vpn | No IP logging is stated. |
| 2026-11-04 | crabgrass.riseup.net/riseuphelp+en/riseup-vpn | The help page states p2p works with the VPN. |
| 2026-11-04 | probe: api.black.riseup.net/eip-service | every gateway offers OpenVPN on ports 53, 80 and 1194 over TCP and UDP |
| 2026-11-04 | probe: api.black.riseup.net/eip-service | every gateway offers obfs4 on TCP port 443 |
| 2026-11-04 | probe: api.black.riseup.net/eip-service | the gateways are not flagged limited |
| 2026-11-04 | probe: api.black.riseup.net/eip-service | the OpenVPN cipher is AES-256-GCM |
Unknown values 1
- per object cap stated: the field does not apply to this kind of offer
RiseupVPN
IP and proxies- Free allowance
- Free to use with no account: 'You just install it and run it—no configuration, no account registration.' The service is donation-funded: 'The cost for us to offer RiseupVPN is approximately $60 USD per person per year', and users are asked to donate at least that.
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented11 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05
| Free tier | Free to use with no account: 'You just install it and run it—no configuration, no account registration.' The service is donation-funded: 'The cost for us to offer RiseupVPN is approximately $60 USD per person per year', and users are asked to donate at least that. The cheapest yearly price is therefore USD 0; the suggested donation is USD 60. unit unlimited; metered on none; No byte or time quota is stated on the pages read, and the published service configuration marks each of its 21 gateways as 'limited': false; that flag's meaning is not documented on the pages read, so the unit unlimited is an absence of a stated quota, not a vendor promise. |
|---|---|
| Price | USD 0; a suggested donation of USD 60 a year; not a per-TB price |
| Limits |
The pages read state no byte quota, device count or rate. The service has no account, so no per-account limit can be enforced by a login. |
| Binding | none No quota or rate is published and no account exists to enforce one; the open question is capacity (a donation-funded service with 21 gateways), which the limit vocabulary does not name. |
| Identity | anonymous No account: 'no configuration, no account registration'. The vendor states it does not log the user's IP address. Donations are optional and go through Liberapay (card or Euro bank debit), PayPal or Bitcoin. |
| Egress | No byte cap or rate is stated on the pages read. All 21 gateways in the published service configuration carry 'limited': false. The help page says RiseupVPN 'bypasses these restrictions and, because you get your own IP, makes p2p applications work much better'. free allowance: free to use; no quota stated |
| Retention | not applicable: a tunnel, not stored bytes |
| Interface | cli A tunnel with desktop and Android apps (RiseupVPN, built on the Bitmask code) and a published JSON service configuration. Protocols: OpenVPN (AES-256-GCM) on every gateway. UDP: yes, on ports 53, 80 and 1194 in both TCP and UDP. Port forwarding: unverified: no page read states it. SOCKS5: unverified: no page read states a SOCKS5 endpoint. Obfuscation: obfs4 over TCP port 443 on every gateway. BitTorrent: the legacy help page lists p2p as a use the VPN supports; no current page states a rule. |
| Tooling | The RiseupVPN app, or a plain OpenVPN client using the gateways, ports and cipher listed in the published configuration at api.black.riseup.net/3/config/eip-service.json (21 gateways, each with openvpn and obfs4 transports). |
| Composes with | A free tunnel exit: traffic leaves from the address of one of 21 gateways, so the upstream sees a shared hosting-network address. |
| Reliability | A donation-funded service run as 'an experiment to see if we can create a VPN service that is easy enough for everyone to use and that people will donate enough to sustain'; capacity and continuity depend on donations. |
| Notes | Duplicate of egress/riseup-vpn, which holds the offer: both records cite the same vendor page. |
| Evidence note | documented Documented for price, sign-up and the BitTorrent line; the protocol, UDP and obfuscation values are measured from the vendor's published service configuration (a probe of the JSON, status 200). The BitTorrent line comes from a legacy help page of unknown date, so it is the weakest value. Nothing was connected through the service. |
| Parsed numbers |
|
Evidence 11
| date | source | what it proved |
|---|---|---|
| 2026-11-04 | riseup.net/en/vpn | No account is needed. |
| 2026-11-04 | riseup.net/en/vpn | part of the text of Free tier, above |
| 2026-11-04 | riseup.net/en/vpn | The vendor's stated cost per user per year is USD 60. |
| 2026-11-04 | riseup.net/en/vpn | No IP logging is stated. |
| 2026-11-04 | crabgrass.riseup.net/riseuphelp+en/riseup-vpn | The help page states p2p works with the VPN. |
| 2026-11-04 | probe: api.black.riseup.net/eip-service | The published service configuration answered. |
| 2026-11-04 | api.black.riseup.net/3/config/eip-service.json | Each gateway offers OpenVPN on ports 53, 80 and 1194 over TCP and UDP. |
| 2026-11-04 | api.black.riseup.net/3/config/eip-service.json | Each gateway offers obfs4 on TCP 443. |
| 2026-11-04 | api.black.riseup.net/3/config/eip-service.json | The OpenVPN data cipher is AES-256-GCM. |
| 2026-11-04 | api.black.riseup.net/3/config/eip-service.json | The gateways are not flagged as limited. |
| 2026-11-04 | riseup.net/en/vpn | the vendor page that both records cite shows the same offer, which the egress record holds |
Unknown values 1
- per object cap stated: the field does not apply to this kind of offer
Riseup VPN (exit addresses)
IP and proxies- Free allowance
- Free to use: no configuration, no account registration; the service is funded through donations.
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- noneno named constraint binds
- Evidence
- documented3 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05
| Free tier | Free to use: no configuration, no account registration; the service is funded through donations. unit unlimited; metered on none; No traffic allowance or speed limit is stated on the page read. |
|---|---|
| Price | no price; donation funded |
| Binding | none No quota or ceiling is stated, so none binds on the sources read; the practical limit is the pool of 21 addresses in 5 ASNs. |
| Identity | anonymous No account registration is needed to install and run the app. |
| Egress | unverified: this record covers the exit addresses of the fleet, not the plan; the plan-level traffic terms belong to the vendor's own egress record where one exists. free allowance: none published for the address list |
| Retention | not applicable: an address, not an object |
| Interface | rest The client configuration is a public JSON file, eip-service.json, listing every gateway with its address; it answers with no credential. |
| Tooling | The vendor client RiseupVPN installs and runs with no account; the gateway list is a public JSON file, so addresses can be read with an HTTP client. No SOCKS5 or HTTP proxy endpoint was found. |
| Composes with | A free compute node runs the vendor client or an OpenVPN client from the gateway file and the traffic leaves at one of 21 gateway addresses; 13 of the 21 are in one ASN, so rotation reaches few distinct networks. |
| Reliability | No suspension, throttle or data loss was measured. 18 of 21 gateway addresses are datacenter-listed and 2 are on an abuse list, so expect datacenter-class blocks. |
| Notes | Exit-address record for the Riseup VPN fleet, classified with detector index 20261103T163900Z-00d117b2 on 2026-11-03: 21 addresses, 18 datacenter-listed, 0 VPN-listed, 0 Tor exits, 2 on an abuse list, 2 on none of the lists; 5 ASNs, largest AS12876 Scaleway with 13 addresses. The tier differs from any plan record. |
| Evidence note | documented Plan facts are documented from the vendor page and the list classification measured on 2026-11-03; weakest rung documented. |
| Parsed numbers |
|
Evidence 3
| date | source | what it proved |
|---|---|---|
| 2026-11-03 | probe: https://api.black.riseup.net:443/3/config/eip-service.json | The gateway file yielded 21 addresses, which were classified. |
| 2026-11-03 | riseup.net/en/vpn | No account is needed. |
| 2026-11-03 | riseup.net/en/vpn | The service has no price; it is funded by donations. |
More fields 1
| exit classification | {"detector_index_version": "20261103T163900Z-00d117b2","classified_on": "2026-11-03","n": 21,"datacenter_listed": 18,"vpn_listed": 0,"tor_exit": 0,"abuse_listed": 2,"in_none_of_the_lists": 2,"asns": 5,"largest_asn": "AS12876 Scaleway","largest_asn_addresses": 13,"endpoint": "https://api.black.riseup.net:443/3/config/eip-service.json","derived": "counts taken over the 21 answers of the registered record; 13 / 21 = 61.9%"} |
|---|
Unknown values 1
- per object cap stated: the field does not apply to this kind of offer