OrbitalHub

The Soyuz MS-28 spacecraft touched down on the Kazakh steppe at 5:27 a.m. local time on Sunday, July 26, 2026, with three crew members strapped into a descent module that had just survived a 7.6 km/s hypersonic dive through the atmosphere. By the time the capsule rolled to a stop about 147 km southeast of Dzhezkazgan, NASA’s Chris Williams, Roscosmos’s Sergey Kud-Sverchkov, and Sergei Mikaev had spent 241 days in orbit and crossed 3,856 orbits of the Earth, roughly 164 million kilometers of free fall, longer than the average round-trip distance from Earth to Mars (NASA, July 2026).

The Soyuz landing sequence has not changed meaningfully since 1967. The capsule separates from its orbital and service modules, fires a braking engine, falls semi-ballistically for about seven minutes through 1,500 °C plasma, deploys two drogue chutes and a 1,000-square-meter main, jettisons its heat shield, and fires six solid-fuel soft-landing engines about 70 cm above the steppe (Energia/RussianSpaceWeb, 2024). Every crew member who has flown on a Soyuz, from the first 1967 boilerplate to Williams’s 2026 flight, has come home in essentially the same hardware lineage. No other crewed spacecraft has logged more return flights to Earth.

That continuity is narrowing. The U.S. Deorbit Vehicle (USDV), a heavily modified Cargo Dragon with 46 Draco thrusters and roughly 16 tonnes of propellant, is scheduled for delivery readiness in October 2028, with launch around mid-2029, after which the 420-tonne ISS will be steered into the Pacific at Point Nemo no earlier than late 2030 (NASA Office of Inspector General, 2025). Every Soyuz landing between now and then is one of the last acts of a 30-year joint occupation of low Earth orbit. On July 26, Expedition 74 ended; Expedition 75, with Jessica Meir in command and Anil Menon freshly arrived on Soyuz MS-29, took over.

Williams, a medical physicist by training, became the 642nd person to enter orbit when Soyuz MS-28 launched on Thanksgiving Day, November 27, 2025, from the Baikonur Cosmodrome. He and his two Russian crewmates joined Expedition 73/74 and spent eight months supporting more than 200 experiments, including semiconductor crystal growth, bioprinting of vascular tissue for cancer research, and testing a new European exercise device called the E4D that combines cycling, rowing, and resistance in one frame (NASA, March 2026).

The handover began on July 14, when Soyuz MS-29, carrying NASA astronaut Anil Menon and Roscosmos’s Pyotr Dubrov and Anna Kikina, docked at the Prichal node module after a three-hour rendezvous. Twelve days later, on July 25, Kud-Sverchkov passed command of the ISS to Meir. The next morning at 3:03 a.m. EDT, MS-28 undocked from the Rassvet module. For about two and a half hours, it drifted away in free fall, trailing by roughly 12 m/s of relative velocity, while ground controllers computed the deorbit burn.

At 5:32 a.m. EDT, the KTDU-35A main engine fired for 282 seconds, slowing the spacecraft by 115 m/s, enough to drop its perigee into the upper atmosphere. Twenty-two minutes later, the habitation and instrument modules separated, leaving only the 2.9-tonne descent module pointed heat-shield-first at an entry interface around 99.7 km. For the next six minutes, the capsule was silent through ionized plasma blackout as it bled off orbital velocity through friction alone.

The drogue chutes unfurled at 10.8 km, slowing the capsule from about 230 m/s to roughly 80 m/s, then the main canopy deployed at 8.5 km and trimmed the descent to a stately 6–7 m/s. The heat shield was jettisoned at 5.5 km, exposing the six solid-fuel soft-landing engines. At 0.7 m above the steppe, the Kaktus altimeter fired them, cutting touchdown speed to about 1.5 m/s. The capsule tipped onto its side, the way Soyuz always does. Recovery teams in Mi-8 helicopters reached the site within minutes. Williams was extracted, given a matryoshka doll with his face, and flown by helicopter to Karaganda before boarding a NASA aircraft back to Houston.

The Soyuz landing is a physics exam compressed into 24 hours of flying. Three constraints drive the design.

First, the lift-to-drag ratio of the descent module is intentionally low (about 0.3 to 0.4), achieved by offsetting the capsule’s center of mass. This generates just enough lift to steer the trajectory and trim peak deceleration to roughly 4 g during a guided reentry, instead of the 8 to 9 g the crew would experience in a fully ballistic descent. When something fails, as it did on Soyuz TMA-1 in 2003, TMA-10 in 2007, and TMA-11 in 2008, the capsule rolls at high speed to wash out the lift vector and falls steeply, sometimes hundreds of kilometers off-target. The lower L/D also caps heating at 150 to 200 W/cm², which is why the ablative shield can be phenolic resin and silica-fiber blanket rather than reusable tiles.

Second, the propulsion system is split. The KTDU-35A main engine, burning UDMH and nitrogen tetroxide (N₂O₄), lives on the service module and is jettisoned before entry. It provides the 115 m/s Δv for the deorbit burn. The six DMP soft-landing engines are solid-propellant, total mass around 60 kg, hidden under the heat shield, fire only once. From Tsiolkovsky’s rocket equation, the deorbit Δv comes out as:

Δv = v_e * ln(m_0 / m_f)

For the KTDU-35A, with a vacuum specific impulse near 315 seconds (v_e ≈ 3,090 m/s), losing 2.9 of the spacecraft’s roughly 7.2-tonne stack mass produces the needed 115 m/s. The math is forgiving; the margin lives in the parachute system.

Third, the parachute system is redundant by design. Two pilot chutes extract a 24 m² drogue, which pulls out a 1,000 m² main canopy. A separate 500 m² reserve canopy is packed independently in case the main fouls. The main weighs about 110 kg and inflates in roughly 1.5 seconds, producing a peak shock load of about 4–5 g.

The Kaktus altimeter deserves a separate mention. Older Soyuz used a cesium-137 source firing downward through a collimator, counting backscattered gamma rays from the soil; modern variants use sealed cobalt-60 in a redundant design. When the count rate climbs above a threshold at about 0.7 m altitude, it triggers the soft-landing engines. The system is mechanical-electronic, not radar, which is part of why Soyuz landings are timed to the second regardless of weather.

By the time the USDV fires its 46 Draco thrusters to drop the ISS into the South Pacific in 2030 or 2031, Soyuz will have completed more than 175 crewed flights and brought more than 500 people home from orbit. The descent module that carried Williams, Kud-Sverchkov, and Mikaev to the Kazakh steppe on July 26, 2026 is a direct descendant of the capsule that killed Vladimir Komarov in 1967. The parachutes are bigger, the altimeter is better, and the crews wear Sokol pressure suits, but the compromise is the same: trade g-load and landing accuracy for simplicity, redundancy, and a soft landing where helicopters can find you.

Expedition 75 now has a seven-person crew and a packed manifest through spring 2027, with a commercial rotation arriving in September aboard Crew-13. The station’s end is on the engineering calendar, but the landing sequence that has defined how humans come home from orbit will outlive it.

Sources: NASA Space Station blog (July 26, 2026); NASA media advisory (July 27, 2026); RussianSpaceWeb Soyuz landing systems reference (Energia, 2024); NASA Office of Inspector General report on USDV (IG-25-001, 2025); Soyuz MS-28 and MS-29 mission press kits (Roscosmos, 2025–2026). Photo credit: NASA/Bill Ingalls.

The launch looked ordinary. On July 16, 2026, at 1:32 p.m. Pacific, a Falcon 9 lifted off from Space Launch Complex 4E at Vandenberg Space Force Base carrying 21 identical flat-panel satellites. The first stage — booster B1103 on its fourth flight — flipped, glided back, and set down on the drone ship Of Course I Still Love You about 8.5 minutes later, logging SpaceX’s 639th successful booster recovery. Routine, until you remember that for nine months before that afternoon, no Tranche 1 satellite of any kind had flown.

The 21 satellites, built by York Space Systems, were the third batch of the U.S. Space Development Agency’s Tranche 1 Transport Layer. They joined 42 others already on orbit. Together those 63 spacecraft form the spine of a network the Pentagon does not quite have a clean phrase for: an internet, of sorts, designed for warfighters, running roughly 1,000 kilometers up in near-polar shells that pass over the equator twice an orbit. By the time the constellation reaches its full Tranche 1 size of 126 satellites, expected by mid-2027, the network will be the largest dedicated military LEO relay ever deployed.

For decades, tactical communications for U.S. and allied forces have run through a handful of heavy, expensive, geostationary satellites. The Advanced Extremely High Frequency (AEHF) constellation carries strategic command traffic in protected, anti-jam channels at $1.8 billion per spacecraft. The Wideband Global SATCOM (WGS) system pipes bulk data to aircraft and ships. Both architectures are excellent when they work. They also depend on a few high-value nodes, parked at fixed slots 36,000 km up, that an adversary can identify, jam, or try to maneuver-kill with a direct-ascent antisatellite weapon.

The SDA’s counter-move borrows a page from commercial internet engineering. Distribute the network across hundreds of small, cheap, replaceable nodes in low orbit, route traffic around any node that gets cut, and refresh the constellation every five years. Multiply the count, distribute the risk, accept a per-satellite ceiling that buys commodity parts rather than bespoke gold boxes. The trade-off is bandwidth per node — geostationary birds carry more — but for tactical purposes where latency and resilience matter more than peak throughput, the math works out differently. The Department of Defense has projected the broader Proliferated Warfighter Space Architecture at roughly $35 billion through fiscal 2029, with about $11 billion already obligated since 2020 (SDA, 2026; GAO-26-107085).

The SDA itself is barely seven years old. Established inside DoD in 2019 to break up a slow, monolithic acquisition culture, the agency set out to demonstrate that a small office in the Pentagon could buy satellites the way a startup buys servers: in tranches, every two years, with each tranche a deliberate step up in capability. Tranche 0, the experimental precursor, flew 28 small satellites between 2023 and 2024 built by York and Lockheed Martin. Those birds proved that optical crosslinks could pass data in low orbit, but a Government Accountability Office report (GAO-26-107085, January 28, 2026) concluded that Tranche 0 never demonstrated an integrated “sensor-to-shooter” loop — partly because the planned capstone demo was reduced after on-orbit calibration ran long.

Still, by the time GAO went to print, the agency had already committed about $9.9 billion in Tranche 1 and Tranche 2 contracts with Lockheed Martin, Northrop Grumman, York, L3Harris, and Sierra Space — roughly fifteen times the Tranche 0 budget of $657 million — before Tranche 0 had fully proven its architecture end-to-end. That decision became the cornerstone of GAO’s headline finding: the risk to delivering missile warning and tracking in Tranche 1 is high.

The first operational Tranche 1 batch, T1TL-A, launched September 10, 2025 with 21 York satellites. T1TL-B followed October 15, 2025 with 21 Lockheed-built satellites. Then the agency paused. Nine months of software fixes, hardware rework, and propulsion diagnostics: a stuck-key scenario in the xenon-feed valve cycling, intermittent glitches in the cryptographic unit, and a series of attitude-control loop instabilities that did not show up on the ground. T1TL-E on July 16 was the resumption, not a clean start. By that afternoon, York had confirmed telemetry from all 21 new spacecraft within five hours of separation; engineers were still working through enabling the optical mesh.

What makes this constellation unusual is the radio underneath it. The rest is plumbing.

Link 16 is the tactical data waveform most Western military aircraft, surface ships, and air-defense batteries already speak. Originally designed for line-of-sight use among fighter jets, it hops pseudorandomly across 51 frequencies in the 969–1,206 MHz L-band at 38,000 hops per second, giving it a built-in jam-resistance that older UHF systems lack. Terrestrial Link 16 is horizon-limited. At typical F-35 cruise altitude, the radio horizon is roughly 800 km, which means a U.S. Navy cruiser off Hainan cannot directly talk to a Patriot battery in Taipei. They need a third party, or a satellite relay.

A relay at 1,000 km altitude can see a circular footprint of radius about 3,300 km. Two or three satellites in polar planes spaced around the globe give near-global skip coverage that does not depend on where the target ships happen to be. The T1TL satellite’s phased-array antennas listen on multiple Link 16 channels simultaneously, retransmitting the digital bits either down to another ground radio or across the next hop.

The crosslinks between the satellites themselves are optical, not radio. Each York-built satellite carries two Mynaric CONDOR Mk3 terminals operating at the 1,550 nm wavelength used by telecom fiber networks. The photon budget over a 5,000 km link works out like this: a 1-watt average laser, a 5 microradian beam divergence, and an 8 cm receiver aperture set a practical on-off-keying rate around 10 Gbps. The Shannon-style capacity ceiling for a wide-deviation DPSK signal at 5 GHz of detector bandwidth and a signal-to-noise of about 18 dB is in the same neighborhood:

C ≈ B * log2(1 + SNR)

With B = 5 GHz and SNR ≈ 18 dB, C ≈ 30 Gbps of theoretical clean-air capacity — the deployed 10 Gbps leaves headroom for pointing loss, atmospheric scintillation on the downlinks, and convolutional coding with 7/8 rate.

Two engineering choices that do not make the press releases deserve a closer look.

In a moving mesh at roughly 7.5 km/s, the optical path between any two satellites changes by tens of meters per second. The crosslink protocol bakes a pseudo-random ranging code into the optical packets so the constellation can resynchronize its symbol clocks to within a few nanoseconds on each handoff. And the routers inside each T1TL satellite run a simple link-state protocol that updates roughly every five seconds; if one node drops out, the network rebuilds its spanning tree in milliseconds. The whole point is that no single loss should matter.

Tranche 1’s remaining satellites will arrive over roughly the next 18 months, with the Tracking Layer — 28 infrared-sensor satellites for hypersonic missile warning — flying in parallel. SDA’s stated initial-operational-capability date is early 2027, though GAO has warned that integration risk may push capability back. The next concrete milestone to watch is the first demonstration in which two Link 16 radios, on either side of the world, exchange a live tactical packet through the optical mesh with humans-in-the-loop on both ends. That has not yet happened on orbit.

Meanwhile, July 16 was a quiet milestone for the architecture. Sixty-three satellites in a near-polar mesh, talking to radios that have been waiting forty years to be heard from space.

About 9 p.m. on the evening of May 28, 2026, a fully stacked New Glenn rocket at Launch Complex 36A began its final countdown. The vehicle stood 98 meters tall, taller than the Statue of Liberty on a pedestal, with seven BE-4 engines ringing its base. Around it, the propellant farm that had fueled the booster for its January 2025 maiden flight sat intact. The transporter-erector that had lifted the rocket onto its launch table four weeks earlier stood at the ready. By 9:07 p.m., both were gone.

This was not a launch. It was a hotfire test — the routine procedure in which a fully fueled rocket is ignited while held to the ground, its engines throttling up to validate the full countdown sequence without a real liftoff. Static fires have a good safety record. They are also where the most informative failures happen, because the rocket is fully instrumented and engineers can usually retrieve most of the wreckage.

The pattern is older than the modern launch industry. On September 1, 2016, a Falcon 9 loaded with the AMOS-6 communications satellite detonated at Space Launch Complex 40 during a pre-launch propellant load. The cause was a composite-overwrapped helium pressure vessel inside the second-stage LOX tank; cold helium had pooled liquid oxygen in a buckle in the aluminum liner, the trapped oxygen ignited, and the COPV failed. Total elapsed time from first anomaly to loss of vehicle: 93 milliseconds (SpaceX 2017 final investigation report). SpaceX’s fleet was grounded for four months, and the company rebuilt SLC-40 from its concrete mat upward.

Both events are symptoms of the same era: a commercial orbital industry large enough that ground-test failures are national news, and that schedules them into customer manifests years in advance. The May explosion cost Blue Origin its primary launch table, transporter-erector, one of two lightning towers, and a vehicle weeks away from carrying 48 Amazon Leo internet satellites. It delayed the Blue Moon MK1 lunar cargo lander from late 2026 into early 2027, forced NASA to revisit the Artemis V manifest, and gave Amazon Project Kuiper a fresh reminder that a single launch provider is a single point of failure.

Blue Origin had rolled the New Glenn stack out to LC-36A on May 22, six days after the FAA cleared the rocket to resume flights following an April anomaly on NG-3’s upper stage. According to Blue Origin’s initial public statements, the anomaly originated in the aft section of the first stage — the part that contains the seven BE-4 engines, their turbopumps, and the dense plumbing that feeds liquid oxygen at roughly 90 K and liquefied natural gas at roughly 112 K into the combustion chambers.

Within hours, Blue Origin CEO Dave Limp publicly committed to a return-to-flight target of “before the end of 2026,” and within weeks the company had completed debris clearance. The investigation is still open, but two facts are doing the heavy lifting. First, the BE-4 has been a reliable engine in flight: it has propelled ULA’s Vulcan to four national security missions since March 2025 (with two recent anomalies lying in Northrop Grumman’s GEM-63XL solid boosters, not the BE-4s), and the same engine has now completed three New Glenn flights with three first-stage recoveries on the droneship Jacklyn. Second, NG-3 in April was a reflight of the booster “Never Tell Me The Odds” — the first New Glenn first stage ever to fly twice — and that booster’s engines performed cleanly through ascent and the boost-back burn.

The booster itself, built around a 7-meter composite fairing that dwarfs Falcon 9’s 5.2-meter shell, had landed cleanly on the droneship Jacklyn during both NG-2 in November 2025 and NG-3 in April. Jacklyn is sized for that scale: 116 meters long and 46 meters wide, with a hydraulically actuated landing fixture and a 375-foot Liebherr crane for vertical-to-horizontal breakover. Whatever happened on the pad in May, the engines that actually reach orbit have already shown they can do it more than once.

The BE-4 is what Blue Origin calls a “medium-performing version of a high-performance architecture.” Each engine burns liquid oxygen and liquefied natural gas in an oxygen-rich staged-combustion cycle. A portion of the LOX is burned with a portion of the methane in a preburner to drive a single turbopump that feeds both propellants into the main combustion chamber at roughly 14 megapascals — about twice the chamber pressure of Merlin and roughly half the 26 to 35 megapascals that SpaceX extracts from Raptor’s full-flow staged-combustion cycle (Blue Origin BE-4 specifications, 2024).

What the BE-4 trades in chamber pressure it tries to win back in reusability. The turbopump spins on hydrostatic bearings — thin films of propellant fluid that bear the load between rotating and stationary parts — rather than on ball or roller bearings that wear under every start cycle. A contact-free bearing eliminates the failure mode that has historically dominated rocket turbopumps, where rotor-stator rubbing generates friction heat in a high-energy-density oxygen-rich environment and a single hot particle can ignite adjacent propellant feed lines.

The Tsiolkovsky rocket equation still rules the design: Δv = v_e * ln(m_0 / m_f), where v_e is the exhaust velocity (roughly 3,400 m/s for BE-4 in vacuum). Reaching low Earth orbit requires about 9.4 km/s of Δv, of which gravity and drag losses consume roughly 1.5 to 2.0 km/s, leaving the engines to deliver around 7.5 km/s. A first stage that needs about 3.5 km/s of its own Δv with v_e ≈ 3,400 m/s requires a mass ratio R = exp(3,500 / 3,400) ≈ 2.8, meaning about 64% of the fueled first-stage mass is propellant.

When aft-section failures do occur, the failure modes cluster in a small list. Rotor-stator contact, often initiated by bearing degradation or cavitation-induced vibration, is one. Turbine-blade fracture, which throws high-energy debris into propellant feed lines, is another. Seal failures that allow LOX and LNG to mix at incompatible temperatures, or cavitation instabilities in the inducer stage of the LOX pump, are others. In most paths the first symptom is a vibration signature through the turbopump housing; a properly instrumented static-fire test records it in hundreds of channels at kilohertz sampling rates. Engineers can usually reconstruct the chain of events within weeks — though identifying the root cause that should be redesigned to prevent recurrence is what takes months.

What Blue Origin is now doing at LC-36 is its own engineering story. Rather than rebuild the same transporter-erector, the company is accelerating a horizontal-to-vertical hybrid integration concept originally planned for LC-36B. Stages are mated horizontally inside the adjacent Integration Facility, then rolled to the pad, where a crane performs a vertical “breakover” — the inverse of the operation used to offload a recovered booster from Jacklyn — and lifts the vehicle onto a refurbished launch table. The architecture eliminates the transporter-erector as a single point of failure and gives Blue Origin a common concept of operations across both pads.

The May 28 explosion did not invalidate New Glenn. The vehicle has now completed three flights, two booster recoveries on Jacklyn, and one reflight. The engines that power it have completed dozens of Vulcan flights for the U.S. Space Force. But the incident exposed a single point of fragility that SpaceX had already learned about in 2016: the ground systems beneath a rocket are as important as the rocket itself. Blue Origin’s recovery plan converts the loss of one transporter-erector into a permanent architectural improvement — horizontal mating, vertical breakover, common CONOPS across two pads — that, if it works, will outlast any single vehicle lost on the pad.

For NASA, the lesson is schedulable. Blue Moon MK1 slips to early 2027; Artemis V, which depends on Blue Moon MK2 launching from a recovered New Glenn, slips with it. For Amazon, the first of 24 contracted New Glenn Leo launches slips along the same curve, though Kuiper has Atlas V and Vulcan capacity to bridge the gap. For Blue Origin, the lesson is the one every second-to-fly vehicle has had to learn: the rocket equation forgives inefficiency, but never a customer whose manifest has nowhere else to go.