Verify a signed record

Paste a LaunchTrust signed scan record and verify the ECDSA P-256 signature over the exact canonical bytes. This page runs in your browser.

LaunchTrust signatures are expected as raw 64-byte r||s values encoded with base64url. OpenSSL and many Python libraries expect DER, so this tool also shows the DER form for cross-checking.

Waiting for a record

Use the signed record from a LaunchTrust scan — its signature is verified against the live public key.