Ed25519 · Public verification
Verify what is authentic.
Enter an MI-… serial, paste a token, or open the link encoded by the QR. Signature, values and revocation are checked without creating a named public directory.
The initial HTTP request does not carry the token: the QR places it after #token=. It contains no email, payment data or IP address.