Skip to content
Sub-processor list

Back to the list · Version française

Check the versions of Duely’s list

Chain intact: 2 entries, from the origin to the last one, recomputed by Duely when this page was opened. To avoid relying on this computation, redo it yourself (“For technical readers”, below).

Each published version enters, when it is published, a dated log in which every line carries the hash of the previous one. Changing or removing a version afterwards would change every following hash: anyone who kept a hash would see it.

What this proves, and what it does not

The chain proves that the versions have not been rewritten since the hash you hold. For the date, each night the log has changed, its hash is deposited outside the service, with public time-stamping services: the deposit shows that these lines existed no later than the date it bears. It is not a qualified time stamp under European law.

Dates deposited outside the service

For technical readers: check without the service

The chain proves that the versions have not been rewritten since the hash you hold. The date comes from anchoring: each night the log has changed, the hash of its last line is sent to the public OpenTimestamps calendars, which write it into a Bitcoin block within a few hours; the proof then shows that this line, and all the lines before it, existed no later than the date of the block. It is not a qualified time stamp within the meaning of the eIDAS regulation.

Files of each deposit

  1. Download the full log (JSON).
  2. The first line starts from the origin: SHA-256 of the text “registre-sous-traitants/registre/service”.
  3. For each line, SHA-256(previous_hash + content), in hexadecimal, must give back its hash; the previous hash of a line is the hash of the line before. Lines that record notices to customers publish only their hashes (their content names the publisher’s customers): the chain stays continuous.
  4. The content of each “version” line holds the list of that version, to compare with the page.
  5. For the date: download the anchored text and its proof (.ots) above, then drop them together on the “Stamp & Verify” page of opentimestamps.org, which tells in which Bitcoin block the proof is, without installing anything. Another way: “ots verify” from the OpenTimestamps client, which needs a Bitcoin node on your machine.
  6. For the date, without waiting for Bitcoin: the RFC 3161 token is signed the same day by FreeTSA. With OpenSSL: openssl ts -verify -data <anchored text> -in <.tst token> -token_in -CAfile cacert.pem -untrusted tsa.crt, the two certificates being the authority’s (cacert.pem, tsa.crt); “Verification: OK” confirms the text and the time.

Recorded versions

Version 1

Published on
31 October 2026, time recorded in the log: 2026-10-31T11:52:39.520Z (UTC)
Position in the log
1
Hash
0a38115cc8c0e8a92c752b235d73c3c58d70e08d8286ddf2e8a0d417049625e2
Sub-processors
2

Version 2

Published on
2 November 2026, time recorded in the log: 2026-11-02T03:37:33.859Z (UTC)
Position in the log
2
Hash
f6bbec75e5388dcfb96139f7acdd0f8d32a1bf79691f04162fa018b2f1c8a846
Sub-processors
2