Verify a certificate

Verification runs entirely in your browser: it recomputes the certificate id from the canonical payload, checks the Ed25519 signature against the issuer public key, and — when the daily root exists — replays the RFC 6962 Merkle inclusion proof. Nothing is taken on trust from this page.

What this proves — and what it doesn’t. The cryptography proves integrity and issuance history: what Aetherneum signed, when, and that it was never altered. It does not prove model provenance — that each AI provider really produced its recorded vote. Provenance is vouched by the issuer: issuance is restricted to Aetherneum’s own admin plane, and a consistency gate rejects any session whose aggregates don’t add up from its per-seat votes.

Verify offline, without this site

Fetch the certificate JSON and the public key once, then:

curl -s https://aetherneum.com/cert/<id>.json -o cert.json
curl -s https://aetherneum.com/.well-known/council.pub -o council.pub

python3 - <<'EOF'
import json, hashlib
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
doc = json.load(open("cert.json")); pub = open("council.pub").read().strip()
msg = doc["payload_canonical"].encode("utf-8")
h = hashlib.sha256(msg).hexdigest()[:16]
assert doc["cert_id"] == "ae1-" + "-".join(h[i:i+4] for i in range(0,16,4)), "cert id mismatch"
Ed25519PublicKey.from_public_bytes(bytes.fromhex(pub)).verify(
    bytes.fromhex(doc["signature"]["sig"]), msg)
print("VALID —", doc["cert_id"])
EOF