Verify it yourself

Don't trust. Verify.

VRP removed the gatekeeper. So prove it: verify a signed stay offer right here, in your own browser.

This page runs the signature check with your browser's native Web Crypto Ed25519. It loads no crypto library, and HemmaBo's servers play no part in the verification. The offer is signed by the host's own domain key — that is the only authority involved.

1. Pick what to verify

Fetches https://<host>/.well-known/vacation-rental.json directly from the host, then the JWKS and the offer endpoint that document names, which must both be node URLs (VRP §2). It follows no redirect, and verifies locally against VRP §7.

What this proves

  • The offer was signed by the host-owned domain's Ed25519 key.
  • The price, freshness, and direct booking URL were not altered.
  • A live offer came from the domain it names, and its booking URL is on that domain.
  • No marketplace, registry, or central issuer sat in between.
  • You confirmed it with your own browser — not on our word.

What this does not claim

  • A valid signature proves source and integrity, not legal compliance, ownership, or licensing.
  • Freshness is separate: a signature stays valid after valid_until passes, but the offer is then stale.
  • Verifiers choose their own trust policy. VRP is no-gatekeeper by design — see the core spec.