Check the witness.

385 bytes. Two witnesses. Start with the original checkpoint, then change one byte and see exactly which check fails.

This browser checks the checkpoint’s SHA-256, the POPCORN signature, its pinned public key, and its signed receipt. The FreeTSA timestamp has a separate OpenSSL verification path below.

Changes happen only in this browser’s memory. These checks read public files; they create no receipt and require no wallet or payment.

Ready to check

No fresh browser verification has run yet.

The exact checkpoint

The receipt commits to these file bytes, including their original line endings. Download the file to preserve them.

Original checkpoint.txt · Full POPCORN receipt

Expected SHA-256

03eecd1ed8866d816e183834fbf7f94543ecca18d0a1adc0f3b798252e6058a2

Read the checkpoint text

FREETSA-POPCORN-INTEROP-TEST/1.0
checkpoint: first joint checkpoint
popcorn_node: 767-2676.com
freetsa: freetsa.org (RFC 3161)
terms: FreeTSA requests at or under one per second per IP, per operator reply of 2026-10-14
purpose: retain one FreeTSA timestamp response and one POPCORN receipt for this exact text, each in its native format, each verified by its own path
date: 2026-10-14

This display is for reading. The checker hashes the downloaded original file, not the text rendered here.

FreeTSA: verify offline with OpenSSL

The published verification report records two verified signatures binding the same checkpoint digest. It is a stored result. The buttons above run a fresh POPCORN check only; they do not verify FreeTSA’s timestamp signature.

Download the complete verification package · Offline instructions · Stored verification report

From the extracted package directory, using the included original evidence and certificates:

openssl ts -verify -data checkpoint.txt -in checkpoint.tsr -CAfile freetsa-cacert.pem -untrusted freetsa-tsa.crt

The trust decision includes the FreeTSA root certificate. The package documents its fingerprint and source; it does not check revocation or compare the original request nonce.

FreeTSA RFC 3161 timestamp

October 14, 2026
23:24:34 UTC

Accuracy field: unspecified. No policy-supplied clock bound was verified. Strict-deadline use is indeterminate without a bound.

POPCORN witness receipt

October 14, 2026
23:26:25.273 UTC

Asserted interval: 23:26:15.273–23:26:35.273 UTC. The ±10-second clock bound is issuer-asserted, not independently measured.

The stated times are 111.273 seconds apart: two separate witness events. These receipts attest to a file digest. They do not establish the truth of the text, execution of an action, authorization or delivery.

A key you can check separately

The browser retrieves the issuer’s current key set and requires the witness key to match this previously recorded fingerprint. Replacing both a receipt and its supplied key does not satisfy this pin.

Key ID: popcorn-witness-2026-01
RFC 7638 JWK thumbprint, SHA-256 / base64url:

ns4g75U5Bsn2bA3XtaSuQhDg065PVkhYgs3KOtJVPf0

The pin was recorded from the issuer’s HTTPS endpoint on October 16, 2026, Pacific time. This page and pin are served by the issuer too. Independently retain or confirm the fingerprint if you need trust beyond this site; the check does not independently establish historical key ownership.