Did the first part of my self-custody procedure. Basically, trying to make a balanced hot wallet (software instead of hardware wallet) that is protected against most common vulnerabilities and a reasonable procedure.

>download tails linux (a linux that runs on ram only from a pendrive), verify the download checksum (the site has its own method, good enough, but you could go further), burn it to a fresh new good brand prendrive (bought mine yesterday) that you never used on an online machine before using rufus
>for xrp download the offline html of the bip39 from this repo: https://github.com/iancoleman/bip39
>for bitcoin download sparrow for debian
>add it to another pendrive or leave it in a folder of your computer (I'm doing the later, it is a risk, but I believe it is fine to access your drives without running anyting)
>verify the checksum of those installs

>boot from the tails pendrive (in my case I'm using my own daily machine which leaves it vulnerable to rootkits, etc... ideal world would be an old laptop dedicated to this that has never been online or something) without internet (cable off, ideally no wifi module)

XRP:
>run the bip39 html on the built in tor browser
>configure it for XRP (coins box) and 24 mnemonics (24 words for your seed pass)
>click generate until you like the words
>write down the words on paper (eventually metal or something so its fireproof, this is your only really important secret, it should never be in an online machine. Even avoid saying the words outloud near your phone)
>get the first address on the bottom, if you mouse over it a QRcode will show
>install xaman in your phone, its a XRP wallet, create a new view-only wallet, read the QRcode from the address, you can always view your money from there, and you can deposit money from exchanges to that address that is now saved on the second wallet