Check a Cadreen receipt

Someone gave you a receipt. This page tells you whether it is genuine and unchanged. It runs in your browser and sends nothing anywhere: you can save this one file and use it with no connection at all.

The file you were given (JSON, up to 1 MB). Or paste it below.

The file receipt-roots.json from the issuer's own address: https://<their address>/.well-known/cadreen/receipt-roots.json. Get it yourself, from the address you already trust, not from whoever sent the receipt.

If the issuer gave you a list of keys they have withdrawn, paste their ids here, separated by spaces (they start with rk1_).

Your purchase order, invoice or customer number for this work, exactly as you write it. A receipt can be tied to the reference of the person it was issued for; if you give yours, this page tells you whether this receipt is the one for it.

What this does, and what it can't tell you

It checks that the receipt was signed by a key the issuer's keys vouch for, that nothing in it was changed afterwards, and that it doesn't contradict itself (for example, that it doesn't say something succeeded when its own evidence says it failed).

It can't tell you the issuer told the truth about what happened. A signature proves who said it, not that it is so. And unless you give it a list of withdrawn keys, it can't tell you whether the issuer has since taken the signing key back.

Nothing you give this page leaves your browser. The page allows no network connection at all.