Legalithm logo

Regulation (EU) 2024/2847

Check a CRA record

A Cyber Resilience Act record states what a manufacturer knew about a product version and what they decided about it. This page opens one and checks it: the content hash, the Ed25519 signature, and every document the record pins by content.

It runs entirely in your browser. Nothing you drop here is uploaded, which is the same promise the CLI makes about your dependency list. You need no account, and you do not need to trust us: the format is published and irrevocable, and a stdlib Python verifier ships alongside it so you can check the same record without this page existing.

Drop a CRA record here

record.json, and optionally its record.signature.json, verification-keys.json and any document it cites.

Checked in your browser. Nothing is uploaded, and this page works offline once loaded.

A record is evidence, not a declaration of conformity. Conformity under Regulation (EU) 2024/2847 stays with the manufacturer, and a valid signature proves possession of a key rather than the identity of whoever holds it.

Produce one with npx legalithm cra record, or read what the CRA requires.