---
name: "sopv-gpgv"
section: "1"
platform: "linux"
package: "sopv-gpgv"
version: "0.1.4-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/sopv-gpgv"
---

# sopv-gpgv(1)

Stateless OpenPGP Signature Verification backed by gpgv

## NAME

sopv-gpgv - Stateless OpenPGP Signature Verification backed by gpgv

## SYNOPSIS

**sopv-gpgv** \[-h\] \[--debug\] SUBCOMMAND ...

## DESCRIPTION

Verify OpenPGP signatures using gpgv

## OPTIONS

- **--debug**

  Provide debugging information

## EXACTLY ONE SUBCOMMAND MUST BE SELECTED

- **sopv-gpgv** *version*

  emit version

- **sopv-gpgv** *verify*

  verify detached signatures

- **sopv-gpgv** *inline-verify*

  verify inline signatures

## COMMAND *'sopv-gpgv version'*

usage: sopv-gpgv version \[-h\] \[--debug\] \[--backend \| --extended \| --sop-spec \|\
                          \--sopv\]

Print version information to stdout

## OPTIONS *'sopv-gpgv version'*

- **--debug**

  Provide debugging information

- **--backend**

  Show gpgv version

- **--extended**

  Show extended version information

- **--sop-spec**

  Show last known version of SOP, the Stateless OpenPGP specification

- **--sopv**

  Show compliant version of the \`sopv\` verification only subset of SOP

## COMMAND *'sopv-gpgv verify'*

usage: sopv-gpgv verify \[-h\] \[--debug\] \[--not-before TIMESTAMP\]\
                         \[--not-after TIMESTAMP\]\
                         SIGNATURES CERTS \[CERTS ...\]

Verify detached OpenPGP signatures

- **SIGNATURES**

  OpenPGP Signatures

- **CERTS**

  Acceptable OpenPGP Certificates for Signature Verification

## OPTIONS *'sopv-gpgv verify'*

- **--debug**

  Provide debugging information

- **--not-before** *TIMESTAMP*

  Only accept signatures later than this (default: None)

- **--not-after** *TIMESTAMP*

  Only accept signatures earlier than this (default: now)

## COMMAND *'sopv-gpgv inline-verify'*

usage: sopv-gpgv inline-verify \[-h\] \[--debug\] \[--not-before TIMESTAMP\]\
                                \[--not-after TIMESTAMP\]\
                                \[--verifications-out VERIFICATIONS\]\
                                CERTS \[CERTS ...\]

Verify inline OpenPGP signatures (either CSF or "Signed Message" OpenPGP packets)

- **CERTS**

  Acceptable OpenPGP Certificates for Signature Verification

## OPTIONS *'sopv-gpgv inline-verify'*

- **--debug**

  Provide debugging information

- **--not-before** *TIMESTAMP*

  Only accept signatures later than this (default: None)

- **--not-after** *TIMESTAMP*

  Only accept signatures earlier than this (default: now)

- **--verifications-out** *VERIFICATIONS*

  Write SOP-style VERIFICATIONS here

## COMMENTS

This tool implements \`sopv\`, the verificaftion-only subset of https://datatracker.ietf.org/doc/draft-dkg-openpgp-stateless-cli/

It uses gpgv (from the GnuPG project) as its backend.

The environment variable $SOPV\_GPGV can be used to choose the name or path of the gpgv implementation used (defaults to "gpgv").

## AUTHOR

```
Daniel Kahn Gillmor <dkg@fifthhorseman.net>
```