Public audit log
Certificate transparency
Key registrations, transfers and relay announcements are all appended to one tamper-evident Merkle tree. Anyone can check that an entry is in the tree without seeing the payload. The mathematics is the same as in the certificate transparency logs of HTTPS (RFC 6962): a Merkle tree with signed tree heads. The difference is who is watching. HTTPS has several independent logs and monitors; here there is one operator, Paramant, and no independent keeper of the tree heads yet.
What is in this log, and whose it is
You are looking at the log of one relay,
health.paramant.app, the one
the web app on this site sends through. Each of the relays we run keeps its own log, so
this is not a total. Most of the entries below are not
transfers at all: they are our own relays announcing themselves. Every entry here is
something a relay said about itself, and for a long time each of them said it again on
every restart, which is why the number below is as large as it is. A relay that announces
itself and has nothing new to say no longer writes a line. Either way, the number of
entries is not a measure of how much the service is used.
Persistent log: survives relay restarts
Hashes are written to disk (
/data/ct-log.json) on each registration
and reloaded on startup. No payload content is ever stored: only cryptographic hashes.
In April 2026 the log did restart, during tests:
the tree of health.paramant.app was started again. 39 entries from that time
(positions 1 to 34 and 42 to 46) have a stored proof that does not fit the current tree.
For five of them (42 to 46) it is proven that this proof comes from the restarted tree; for the other 34
that is likely, but not proven. The list below and the inclusion proof use the current tree for all 39
and show the old value separately. For every later entry the stored tree head does fit the current tree
(independently recomputed on 6 October 2026). Apart from that the log restarts only when the relay volume is deleted.
n/a
Log entries
n/a
Key registrations
n/a
Transfer proofs
n/a
Relay announcements
n/a
Merkle root
n/a
Relay
n/a
Last entry
Verify a hash
#
Leaf hash
Tree hash
Timestamp
Loading log…
n/a