{
  "state": "on",
  "rekor": {
    "url": "https://log2025-1.rekor.sigstore.dev",
    "vkey": "log2025-1.rekor.sigstore.dev+cf119915+AbfK5adZJxsI323FwGD2AJJ9F4i89cfDuLdGJBIYntuO",
    "entry": "hashedrekord 0.0.2 over the log-signed checkpoint note"
  },
  "tsa": {
    "url": "http://timestamp.digicert.com",
    "roots": [
      {
        "name": "DigiCert Trusted Root G4",
        "sha256": "552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988",
        "source_url": "https://cacerts.digicert.com/DigiCertTrustedRootG4.crt",
        "timestamping_cas": [
          {
            "name": "DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1",
            "sha256": "ca0b1554ecd901ea19dcad8749e9f2648c8d6dfcea1add9d2c2109415bb82ccd",
            "source_url": "https://cacerts.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crt"
          }
        ]
      }
    ],
    "entry": "RFC 3161 TimeStampToken over sha256 of the log-signed checkpoint note"
  },
  "quorum": 2,
  "trust": {
    "log_vkeys": [
      "aisourceoftruth.com/log+3b162de5+ASW799lCqbFOP7rojZjZlbDqBarpu1gimAMGcPaf2t8r"
    ],
    "anchor_spki": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1VuNutQkXY3DBD9N1tisGFs3Q2HCzTHzAq2FgDult4shqPqJxRavfkNOTBMMWJTPajfIy9230CJeOJ1uexwErQ==",
    "rekor_vkey": "log2025-1.rekor.sigstore.dev+cf119915+AbfK5adZJxsI323FwGD2AJJ9F4i89cfDuLdGJBIYntuO",
    "tsa_roots": [
      {
        "tsa": "http://timestamp.digicert.com",
        "name": "DigiCert Trusted Root G4",
        "sha256": "552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988",
        "source_url": "https://cacerts.digicert.com/DigiCertTrustedRootG4.crt",
        "pem": "-----BEGIN CERTIFICATE-----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\ngKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+\n-----END CERTIFICATE-----",
        "timestamping_cas": [
          {
            "name": "DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1",
            "sha256": "ca0b1554ecd901ea19dcad8749e9f2648c8d6dfcea1add9d2c2109415bb82ccd",
            "source_url": "https://cacerts.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crt"
          }
        ]
      }
    ]
  },
  "interval_minutes": 60,
  "latest_anchor": {
    "tree_size": 49,
    "rekor_url": "https://log2025-1.rekor.sigstore.dev",
    "log_index": 199160403,
    "anchored_at": "2026-11-14T22:23:02Z"
  },
  "latest_tsa_stamp": {
    "tree_size": 49,
    "tsa_url": "http://timestamp.digicert.com",
    "gen_time": "2026-11-14T22:23:02Z"
  },
  "witnessed": {
    "configured": [
      "log2025-1.rekor.sigstore.dev",
      "timestamp.digicert.com"
    ],
    "newest": {
      "tree_size": 49,
      "witnesses": [
        "log2025-1.rekor.sigstore.dev",
        "timestamp.digicert.com"
      ],
      "count": 2,
      "met": true
    },
    "quorum_met": true,
    "words": "Quorum met: checkpoint 49 carries 2 outside witnesses (log2025-1.rekor.sigstore.dev and timestamp.digicert.com); the quorum is 2."
  },
  "proof": "https://aisourceoftruth.com/v1/transparency/proof/{digest}",
  "verify": "https://aisourceoftruth.com/v1/verify/transparency",
  "page": "https://aisourceoftruth.com/verify/transparency",
  "statement": "Once an hour, when the log grew, the newest checkpoint this registry signs goes to two outside witnesses it does not run: a public Rekor v2 log, and an RFC 3161 timestamp authority (DigiCert). witnessed says which checkpoint each one covered and whether the quorum is met. A record checks when it is in a witnessed checkpoint signed by the log key and every witness present checks: that exact checkpoint is an entry in Rekor signed by the anchor key and included under Rekor's signed checkpoint, and the timestamp token names that checkpoint's sha256 and chains to the pinned TSA root. The quorum is two witnesses. The witnesses cover checkpoints, not the daily root: the daily root at /v1/roots/{day} carries its own RFC 3161 timestamps and an OpenTimestamps proof, and no Rekor entry."
}