Manifest signing

Public signing keys

ARALLIA signs manifest fingerprints with an Ed25519 key. Here are the public keys, their status and validity: anyone can use them to verify a signature without taking our word for it.

This page is not enough. A key shown here is published by the same site as the manifests: if the site were compromised, so would it be. The fingerprint of the active key is therefore published OUTSIDE this site (platform announcement, public repository, DNS record). Compare it with the one below before relying on a signature.