Docs/Signing Keys/ed25519-prod-2025-02

ed25519-prod-2025-02

Active

This key signs new records and verifies historical ones. It is the current production signing key for its listed products.

Key facts

Algorithm: Ed25519
Signs: certificates, decisions, datasets
Created: Sun, 22 Feb 2026 18:26:46 GMT

Public key (PEM)

-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEAGvAJNlssfFuZp4TNNr0eZhYNHoQSgng92z8lLjKcwLM=
-----END PUBLIC KEY-----

Raw 32-byte key (base64url): GvAJNlssfFuZp4TNNr0eZhYNHoQSgng92z8lLjKcwLM

Verify independently

This page is derived from the machine-canonical key document. Independent verification means trusting that document and standard cryptography — not this application:

# 1. Fetch the canonical key document and find this key
curl -s https://certifieddata.io/.well-known/signing-keys.json | jq '.keys[],.retired[],.revoked[] | select(.key_id=="ed25519-prod-2025-02")'

# 2. Verify a certificate's Ed25519 signature with any RFC 8032 implementation
#    (signature input = RFC 8785 JCS canonicalization of the signed payload)

Key lifecycle documentation →Verify a certificate →Canonical JSON document →