Anyone can check.
Even a competitor.
An issuer publishes its public keys at a plain URL. You fetch them, you hold the receipt, and the check runs where you are. No account, no directory, no lookup by identity.
Generating keys…
Hold a receipt. Check it here.
Pick a receipt or edit the one in the box. The page reads the issuer's public key file, checks the key was live when the receipt was signed, and verifies the Ed25519 signature. Nothing leaves the tab.
real Ed25519 in this tab · nothing sent
Change any character in a signed field and check again, or tamper in one tap:
Keys change. Receipts still check.
Tap a date to see the key file as it stood. A receipt checks against the key that was live when it was signed, so an old receipt survives a rotation and a new one can't borrow a retired key.
the full key history lives on history · the example key set lives on registry
It tells you. Then it keeps nothing.
Every check you run on this page lands here. The answer stays on your screen. The receipt is dropped the moment the answer is out, and who asked was never known.
Kept means receipts, identities, or lookups stored. There is nothing to search later, because there is no directory.
- No checks yet. Run one above.