EuroTSA

A free, EU-hosted RFC 3161 timestamp authority. Same protocol, same "free forever" posture as FreeTSA.org — disclosed operator instead of an anonymous personal server.

Usage

Standard RFC 3161 over HTTP. Any client that speaks to FreeTSA already speaks to this — point it at eurotsa.eu/tsr instead.

openssl ts -query -data myfile -cert -sha256 -out request.tsq
curl -sSH "Content-Type: application/timestamp-query" \
  --data-binary @request.tsq https://eurotsa.eu/tsr -o response.tsr
openssl ts -verify -in response.tsr -data myfile \
  -CAfile eurotsa-root.crt.pem -untrusted eurotsa-chain.crt.pem

Certificates

Download the certificate chain — needed to verify a timestamp independently of eurotsa.eu itself.

Supported digest algorithms

sha256, sha384, sha512. No md5/sha1 — no reason to carry broken digest algorithms into a service built in 2026.

Certification Practice Statement

Operator: SPRK10 B.V., a company registered in the Netherlands.

Service description: EuroTSA issues RFC 3161 trusted timestamps. It is not a qualified trust service under eIDAS — no CAB audit, no ETSI EN 319 421/422 compliance, no EU Trusted List filing. It carries the same evidentiary weight as any other non-qualified RFC 3161 timestamp.

Availability: made available at all times, 24x7x365, if possible. Offered as-is, with no SLA and no warranty of any kind, express or implied.

Privacy: EuroTSA does not log submitted hashes or document content. Requester IP addresses are held only transiently, in the rate limiter's sliding window, and are never persisted to disk or a database.

Rate limit: 100 requests/hour per IP address.

Contact: operated by SPRK10 B.V. — see the footer for contact details.