Mirror Roster
Three v3 onion addresses, one master signature. The roster below is republished daily under fingerprint 0A9D and is the canonical source for the working Nexus Market URL.
#Active mirrors
| Roster signed | 2026-04-25 00:00 UTC by master 0x7F2A0A9D |
|---|---|
| Signature freshness | 24 hour window, re-signed daily |
| Mirror count | 3 active, no retirement scheduled |
| Cross-signed witnesses | 3 independent custodians, key bundle on each mirror |
#Verification command
Pull the timestamp block from the login page of any mirror. Save locally. Run the command below.
$ gpg --verify timestamp.asc Good signature from "Nexus Market <0x7F2A0A9D>" Primary key fingerprint: 7F2A 9C41 66B8 E1D5 4832 19A4 88F3 BD2C 1E5A 0F77 ... 0A9D
Anything other than GOOD signature with the matching fingerprint is a verification failure. Close the tab and re-pull the onion from this handbook. Do not retry on the same address.
#Architecture
The three onions are not load-balanced behind one host. Each mirror runs on independent infrastructure in a different region, behind a separate Tor descriptor. A coordinated takedown of any one mirror has zero effect on the other two. Latency drift between mirrors reflects which exit nodes Tor is currently routing through, not load on the market core itself.
Descriptor publishing for each mirror is staggered by 90 minutes to avoid simultaneous publication failures during Tor consensus drift. If a directory authority misses one window, the staggered publish picks up the next round, so the worst case is a single-mirror unreachability for less than 90 minutes. Rare in practice.
#Retirement policy
A mirror is retired only when one of three conditions is met:
- Sustained latency above 2 seconds for 30 consecutive days. Indicates upstream provider degradation that does not recover with circuit changes.
- Hosting provider takedown, which makes the mirror unreachable through any circuit.
- Operator request after a key compromise event affecting the mirror operator's signing material.
When a mirror retires, the new replacement is published in this roster with a 72 hour overlap with the outgoing address. The retirement notice is signed by the master key and republished on every active mirror under /announcements. The old address stays reachable through the overlap window, after which it is dropped from the roster permanently.
#Probe network
Health probes touch each mirror every fifteen minutes through fresh Tor circuits. Probe results are signed by an observer key separate from the master, witnessed quarterly by the same custodians who sign the master. The raw probe data is published on each mirror under /announcements/probes for anyone who wants to verify the underlying numbers.
Probes do not consume sessions, do not load product pages, and do not interact with the order subsystem. The probe footprint is uncorrelated with user activity, which is the right design for a public health surface that should not introduce new attack surface to the market itself.
#What a fourth or fifth mirror means
It does not exist. The roster is intentionally small. Three mirrors is the minimum that survives a single takedown plus a single transient outage simultaneously, and also the maximum that can be kept signed and published with low operational overhead. Adding more mirrors would dilute attention without adding redundancy. The roster has stayed at three since the public launch and is not scheduled to grow.
If you encounter a Nexus advertisement claiming five, ten, or unlimited mirrors, the source is a phishing operator scraping known onion lists and adding fakes. Always verify against this roster.