Rutba

Rutba Sign

Verify a countersignature.

Paste the manifest digest from a completion certificate and we will tell you whether it was presented to Rutba, and exactly when. That is the entire claim — what it does and does not mean is spelled out below, on purpose.

The digest is the SHA-256 of the completion manifest — 64 hexadecimal characters, printed on the completion certificate and carried in its verify link. It identifies the evidence record without revealing anything in it.

What this checks

Existence and time. Nothing else.

Saying precisely what an attestation means is what makes it worth anything, so here is the whole of it.

What a countersignature attests

That this exact digest was presented to Rutba’s countersigning service at the stated moment, on Rutba’s own clock. It proves the evidence record existed no later than that instant and has not been altered since — an altered record would have a different digest.

What it does not attest

It does not attest that any document is valid, genuine or legally effective. It does not attest who signed anything, or that any signer is who they claimed to be — identity evidence, where it exists, lives inside the manifest itself and is the issuing instance’s record, not Rutba’s claim. And an unknown answer does not mean a document is forged: the instance that produced it may not countersign with Rutba, or the digest may simply have been copied incorrectly.

Holding the completion package itself?

This page checks a digest against Rutba’s ledger; it never sees your documents. To verify a completion package in hand — that the sealed manifest matches the documents, that the seal itself is intact — use the verifier on the instance that issued it, which is linked from the completion certificate. That check examines the package; this one attests the digest’s existence and time, and the two together are the full picture.

Anyone can perform this check, no account needed, and it stays free — evidence that stopped verifying when a subscription lapsed would not be evidence. The countersignature is a signed statement you can also check yourself: fetch Rutba’s countersigning keys and verify the returned JWS with any JOSE library, offline, without trusting this page.