Attestation verifier
Don't trust us. Verify.
Paste any OnchainDiligence attestation below. Your browser fetches our published public key and checks the Ed25519 signature locally — nothing is sent to our servers. If it verifies, that result provably came from us, unaltered, at the time it says.
Paste an attestation (JSON)
key: loading…
Verifies against the key at /keys
How verification works
This isn't us telling you it's valid — it's your own browser doing the cryptographic check. The whole point of a signed attestation is that you never have to trust the source.
Fetch the public key
Your browser pulls our Ed25519 public key from
/.well-known/attestation-key — the same key published on the key-transparency page.Reconstruct what was signed
The signature covers
JSON.stringify({ data, issued_at, key_id }) using the exact values in the attestation. Your browser rebuilds that string.Check the signature locally
WebCrypto verifies the Ed25519 signature against the public key, in your browser. A pass means the result is authentic and unaltered; a fail means something changed.
What a valid signature does and doesn't mean. Valid means this exact result was produced and signed by OnchainDiligence at the stated time, and hasn't been tampered with since. It does not re-run the underlying check or assert the upstream data was complete — an attestation is proof that a check happened and what it said, not a fresh determination. See the terms for the full framing.