Verify a licence
Is this Blastbeat licence real ?
Every Blastbeat licence is a W3C-aligned Verifiable Credential with a SHA-256 tamper-evident proof, recorded on the Blastbeat register. Anyone can verify any licence here: the register confirms it was issued (and not revoked), the hash check confirms the document was never altered.
✓ W3C Verifiable Credential
SHA-256 proof
Tamper-evident
Paste the credential JSON
Drop the .json file from the licence email below, or paste it directly. The verifier recomputes the SHA-256 proof in your browser — nothing is uploaded anywhere.
Choose a .json file · or drag & drop
Verify proof
Try a sample
Clear
How verification works
Every licence is a JSON-LD document with a proof field containing a SHA-256 hash. The hash is computed across the canonicalised credential body (every field, every nested value, sorted by key).
To tamper is to break
Change any value in the credential — one digit in the licence ID, one letter in the school name, one day on the validity window — and the recomputed hash will no longer match the stored proofValue. Verification fails. The fraud is visible.
What the verifier checks
The credential is well-formed JSON-LD with a proof object
The proof.type is Sha256Stamp2026
Recomputing the SHA-256 of the canonicalised body yields the same proofValue
Reports issuer entity, validity dates, and the holder
Cross-checks the Blastbeat register: the credential ID must be on it with the same proof, and not revoked
Production roadmap
For the founding cohort (2026), Sha256Stamp2026 is a content hash — tamper-evident but not unforgeable. The 2027 issuance schedule moves to Ed25519Signature2020 signed by the issuing entity’s registered DID, fully unforgeable. The verifier here will keep working for both.
Issuing entities
Africa — Climate Actions Now RSA (Pty) Ltd