{"protocol":"ica-trust-anchor-v1","issuer":"ALEETH ICA","generated_at":"2026-10-05T19:35:36.200Z","keys":[{"id":"ica-registry-root-1","algorithm":"ed25519","status":"current","public_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAQb4mwGmPyxcYmnAvmzVzhswXNMLn5keqdE2Eem8tuIE=\n-----END PUBLIC KEY-----\n","fingerprint_sha256":"bf3f77c274d66d3de6d92168fdc3d629cef97fd5110e5743c55b19ccae1da1d5","fingerprint_basis":"spki_der","created_at":"2026-08-28T04:07:16.094127+00:00","retired_at":null},{"id":"ica-kms-es256-1","algorithm":"es256","status":"es256_current","public_pem":"-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpWYsozNrUFKGMiCZnNgsrGUg+9e3\nOihvUZByqfZ/CrcUYrLO2+TL3g0Xibko5cd+EMYVopoZfUd80W4ttHWjGw==\n-----END PUBLIC KEY-----","fingerprint_sha256":"763506edc0c624dbf16499e898c6450e5594652a26c66d9b1eae4c8796e79c72","fingerprint_basis":"spki_der","created_at":"2026-08-27T23:08:40.875825+00:00","retired_at":null},{"id":"ica-pq-23d52e3ff727","algorithm":"ml-dsa-65","status":"pq_current","public_pem":"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","fingerprint_sha256":"23d52e3ff72752d94dbcdd14ce47846f76644cef9f4b9a888da25ed7a95e1c33","fingerprint_basis":"raw_public_key","created_at":"2026-08-19T02:36:11.330717+00:00","retired_at":null},{"id":"ica-receipt-vault-1","algorithm":"ed25519","status":"current","public_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAO+xqeJ+s2iV3QussQwC69gwjOA0oRlBmy4DjB7q06Po=\n-----END PUBLIC KEY-----","fingerprint_sha256":"f9570d00db4a2436abeeef8fa8caaa95a1dfbe1cf5877d070f51f0bdbb1e069b","fingerprint_basis":"spki_der","created_at":"2026-08-05T09:36:19.172946+00:00","retired_at":null},{"id":"ica-receipt-e30177d1022f","algorithm":"ed25519","status":"retired","public_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAnlNVtzORkankIW6VqB+X7sWcm/2MsH4wQbj6C/S83tg=\n-----END PUBLIC KEY-----","fingerprint_sha256":"c9c96d6c1c084622401ac276ff6dae89e706a15cef8a4fd9c47ec50335b52c9e","fingerprint_basis":"spki_der","created_at":"2026-05-21T07:33:24.277438+00:00","retired_at":"2026-08-05T09:36:19.172946+00:00"}],"how_to_pin":"Save this file. Confirm each key fingerprint_sha256 out of band once: it is the SHA-256 of the key bytes in public_pem (fingerprint_basis spki_der for the PEM-armored Ed25519 and ES256 keys, raw_public_key for the ML-DSA-65 key, whose public_pem is the raw key as base64). From then on, verify any ICA receipt against the pinned public_pem here, never re-fetching from ICA.","how_to_verify":["1. Take an ICA receipt (JSON) and its signing_key_id.","2. Find the matching key in this file by id; use its public_pem.","3. Canonicalize the receipt payload (sorted keys, no whitespace), sha256 it, and confirm it equals the receipt hash.","4. Verify the Ed25519 signature over the canonical payload with the pinned public key.","5. For independent-of-ICA time proof, the receipt's audit seal is timestamped to a Bitcoin block via OpenTimestamps (see the bitcoin_anchor on the cert verify response); confirm the .ots proof against Bitcoin with any OpenTimestamps client."],"also":{"current_key_pem":"https://imperium.aleeth.com/.well-known/ica-receipt-pubkey.pem","all_keys_json":"https://imperium.aleeth.com/.well-known/ica-receipt-pubkeys.json","receipt_verify":"https://imperium.aleeth.com/api/receipts/verify/:receipt_hash","cert_verify":"https://imperium.aleeth.com/api/cert/verify/:cert_number","offline_verifier":"https://imperium.aleeth.com/tools/ica-verify/verify.js","offline_verifier_use":"node verify.js <receipt.json> --pubkeys <this file>. With a receipt file and this file it makes no call to ICA."}}