# OMDP39 Release Verification

This document explains how to verify the signed OMDP39 offline release artifact.

## Current signed offline artifact

- File: `downloads/omdp39-tool-v1.0.17-offline.html`
- SHA-256: `3c32d41d8384c3b400444ebad25a9c5278ae46d94897704b79bf5e9a17546f59`
- Signature: `downloads/omdp39-tool-v1.0.17-offline.html.minisig`
- Public key: `downloads/omdp39-release-signing.pub`

## Verify SHA-256

```bash
shasum -a 256 -c omdp39-tool-v1.0.17-offline.sha256.txt
```

Expected result:

```text
omdp39-tool-v1.0.17-offline.html: OK
```

## Verify minisign signature

```bash
minisign -Vm omdp39-tool-v1.0.17-offline.html \
  -p omdp39-release-signing.pub
```

## GitHub release status

The public GitHub release repository is currently in preparation. Until it is live, the signed offline artifact can be verified using the SHA-256 checksum, minisign signature, and public signing key published on `omdp39.io`.
