Withdraw witness

Trail 2026-09-19-fra1

Experiment Nr. 1, Lauf 3 — Rückkehr nach Wartung, Drain fra1-lab (Virtua FRA)

• Origin: anycast.dev/witness/2026-09-19-fra1
• Data: entries with witness.source atlas-feed are RIPE Atlas measurement results (RIPE NCC, atlas.ripe.net); all other entries come from our own hosts.
• Signing key: ed25519:70ca7594ff7ebc9e, published 2026-09-19 (vor dem Lauf) at /.well-known/logsiegel-pubkey.txt
• How to check it: /.well-known/logsiegel-verify.txt (German)
• File list with sizes and SHA-256: MANIFEST.txt

Fetch and verify

BASE=https://anycast.dev/witness/2026-09-19-fra1
mkdir 2026-09-19-fra1 && cd 2026-09-19-fra1

curl -sO "$BASE/MANIFEST.txt"
curl -sO "$BASE/log.jsonl.gz"
curl -sO "$BASE/checkpoints.jsonl"
curl -sO "$BASE/origin"

mkdir -p keys anchors
curl -s -o keys/signing_key.pub "$BASE/keys/signing_key.pub"
for f in $(awk '$3 ~ /^anchors\// {print $3}' MANIFEST.txt); do
  curl -s -o "$f" "$BASE/$f"
done

gunzip -k log.jsonl.gz

# what you got is what the manifest says
awk '$1 ~ /^[0-9a-f]{64}$/ {print $1"  "$3}' MANIFEST.txt \
  | shasum -a 256 -c          # GNU: sha256sum -c

# the key comes from the published file, not from the trail
curl -s https://anycast.dev/.well-known/logsiegel-pubkey.txt -o pubkeys.txt
sed -n '/Lauf-ID: *2026-09-19-fra1$/,/END PUBLIC KEY/p' pubkeys.txt \
  | sed -n '/BEGIN PUBLIC KEY/,/END PUBLIC KEY/p' > pub.pem

pip install logsiegel==0.1.2
logsiegel verify . --pubkey pub.pem

Expected: PASS: <N> entries, <M> checkpoints. The guide also shows how to break the check on purpose, so you know it measures something.

The copy of the public key inside the trail (keys/signing_key.pub) proves nothing against us — whoever controls the directory can rewrite log and key together. Take the key from the published file.

Files

Unpacked, log.jsonl is 56,986,171 bytes, SHA-256 fc357e43a99ecd6d86140ca2c842671e476a1a341d0021c7a46af3684c2316cc. Unpacking changes nothing about the proof.

32 RFC 3161 timestamp tokens are in anchors/; each one stamps a signed checkpoint root. The certificates to check them against: digicert-root-g4.pem, digicert-chain.pem — or your own system trust store, the result must be the same.

All runs