# Published signing keys

Site: https://patrickaudley.com/

Long-term OpenPGP identity fingerprint: DF3B3209EEDB36C800F09C1F1712C2A155DF887E.
Detached canonical-artifact signatures use the separate OpenPGP key AF5E0032F7494CEBCAA7BBBE9B87CFBBCFDBAF11, published at /pgp/github-signing.asc.
This site publishes the following Ed25519 key for provenance-manifest signatures. HTTP response signing is not currently enabled.

The Ed25519 key's published validity ends on 2027-10-10:
  kid: k1mncKmoX7DxvnpDQN8-NEq9j0nVqVeh8R20DkNG94g
  jwk: {"kty":"OKP","crv":"Ed25519","x":"c46Tv7if5sHQSob6EZPnCYdS9P1uRQSlV64gXQcgCBs"}
  role: content-provenance manifest signing; RFC 9421 response signing reserved
  directory: /.well-known/http-message-signatures-directory
  not_before: 2026-10-10T20:33:49Z
  not_after: 2027-10-10T20:33:49Z

OpenPGP verification key:
  fingerprint: DF3B3209EEDB36C800F09C1F1712C2A155DF887E
  url: /.well-known/pgp.txt
  role: long-term identity; transition statement published separately
  transition_statement: /pgp/key-transition-2026.txt