Skip to main content

Verify a demonstration

Is this demonstration authentic?

Enter the short code printed on the poster or leaflet, or the SHA-256 fingerprint of a sheet or manifest. ARALLIA tells you whether it matches a demonstration published by an identified movement.

How verification works

  1. Every published demonstration receives a 6-character short code, used in its QR code and its short link.
  2. Every sheet and every manifest has a SHA-256 fingerprint: if a single character changes, the fingerprint changes.
  3. Verification compares what you enter with what the movement published, down to the version.

“Authenticated” means that the document exists and comes from an identified movement. ARALLIA judges neither ideas nor demands.

Verify it yourself

Do not take our word for it: a manifest signature can be verified offline, with the public key, by any Ed25519 tool. Fetch the signed manifest, recompute its fingerprint, then check the signature.

Pin the key: note the signing key fingerprint once from a source independent of this site (platform announcement, public repository, DNS record) and reject any signature from another key. Without pinning, a verifier can only conclude that the document is consistent.

# 1. Récupérer le manifeste signé et les clés publiques
curl -s https://<site>/api/public/v1/movements/<mouvement>/manifest -o manifeste.json
curl -s https://<site>/.well-known/arallia-keys.json -o arallia-keys.json

# 2. Vérifier hors ligne, en épinglant l'empreinte de clé publiée HORS du site
arallia-admin verify-manifest manifeste.json --keys arallia-keys.json --pin <empreinte-sha256>
# code 0 : valide ET clé épinglée | 3 : valide mais clé non épinglée | 4 : partiel | 1 : invalide | 2 : non signé

Full verification guide (developers) · Public signing keys