seal receipt

Seal c39bd359cd74dca8

A set of files existed, unchanged, no later than the times below. What the files are stays with whoever sealed them until they reveal one.

root	9babc40622278e8e44b10eb0da95ba25bb52b8d316edfa146c9e75e3afd48c89
statement	pith-seal-v1 9babc40622278e8e44b10eb0da95ba25bb52b8d316edfa146c9e75e3afd48c89
received by Pith	2026-11-11 19:38:25 UTC
Bitcoin	confirmed in block 975,469, mined 2026-11-11 19:56:04 UTC
DigiCert (RFC 3161)	signed 2026-11-11 19:38:25 UTC
FreeTSA (RFC 3161)	signed 2026-11-11 19:38:25 UTC

Files for checking it yourself

seal-c39bd359cd74dca8.txt: the statement, byte for byte
seal-c39bd359cd74dca8.txt.ots: OpenTimestamps proof
seal-c39bd359cd74dca8.digicert.tsr: RFC 3161 token
seal-c39bd359cd74dca8.freetsa.tsr: RFC 3161 token
JSON: this receipt, with every proof inline
Certificate: a printable one-page summary

Check a file against this seal

Choose a file

The file is read in your browser and never sent.

Revealed files

file	fingerprint (SHA-256)	revealed
The Breath at the Wall: A Balanced, Steady Window of Eight Postings Is One Act doi:10.67347/pith.preprint.2026.000058	34d92d8c9a52c6e3041eed4aa97f5b1ab7e89679da2768672816cd8f126f9876	2026-11-11 19:38:26 UTC

Every file in this seal has been revealed. Nothing sealed here remains hidden.

Checking without Pith

Download the statement and its proofs, then:

ots verify seal-c39bd359cd74dca8.txt.ots
openssl ts -verify -data seal-c39bd359cd74dca8.txt -in seal-c39bd359cd74dca8.freetsa.tsr -CAfile cacert.pem -untrusted tsa.crt
openssl ts -verify -data seal-c39bd359cd74dca8.txt -in seal-c39bd359cd74dca8.digicert.tsr -CAfile /etc/ssl/certs/ca-certificates.crt

ots verify reads Bitcoin from a local node; without one, ots info prints the block and its merkle root to compare with any block explorer. FreeTSA's cacert.pem and tsa.crt are at freetsa.org. To check a revealed file by hand: its leaf is SHA-256(0x00 ‖ salt ‖ SHA-256(file)); combine it with each step of its path as SHA-256(0x01 ‖ left ‖ right), putting the step's hash on the side it names, and the result must equal the root.