Verifying an AI Transparency Label
Every label issued by CICS is signed with a dedicated Ed25519 key. The signature covers the canonical string
Key fingerprint
D42D3EFFC28E1A8C2A0EC6923F65B9506C54C838
Import the CICS AI Labels public key:
curl -fsSL https://cics.ch/ai-label/key.asc | gpg --importCopy the canonical string and the armored signature from the label page (both are visible).
Run the verification:
# save the armored signature to sig.asc, then: gpg --verify sig.asc <(printf %s "CICS-2026-05-001/AITL:1/I:R/T:C+F+R/M:claude-opus-4.7/R:F/S:H+P") # # expected output: # gpg: Good signature from "CICS AI Labels <ai-labels@cics.ch>" # gpg: using EDDSA key D42D3EFFC28E1A8C2A0EC6923F65B9506C54C838