CastNym content check

Check our signatures yourself

This is the key that proves a file came from CastNym. You only need it if you want to check a signature yourself with your own tools.

The key set

Where to fetch it

/.well-known/pubkey

Public key, base64

MCowBQYDK2VwAyEA7NBbyQsKerHIdRGQtT7gcZlnWDA7nNzq0new5zbnQZM=

Read the key id off the signature. Every CastNym signature carries one, so you never have to guess which key made it.
Find that key id in the key set, or fetch the whole set from /.well-known/pubkey and read it from there.
Verify the Ed25519 signature over the payload published beside it. If the key id names a key we have retired, that is fine: a retired key still verifies everything it signed.