{"publishedAt":"https://perissos.ai/.well-known/export-signing-key","keys":[{"keyId":"900322ac58b44da8","publicKeyPem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAFbRPT6ZZBsXd4dAF4mbCW0dkIlTv+hKkntMiJDsHx1k=\n-----END PUBLIC KEY-----\n","activeFrom":"2026-07-19","retiredAt":"2026-08-22","note":"Retired 22 August 2026 without ever signing anything. Its private half was never usable on production: the EXPORT_SIGNING_PRIVATE_KEY variable held only the PEM header line, so no export was ever signed under this key. The record stays published because a retired key is kept forever so past exports verify, and because a reader of the history is owed the reason a key that signed nothing is here at all."},{"keyId":"41808f8a25d20693","publicKeyPem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEASzcg4AHWpwEO4njEj+f7wny9Xfh+txvQUhcQ894rHF4=\n-----END PUBLIC KEY-----\n","activeFrom":"2026-08-22","retiredAt":"2026-09-21","note":"This key is retired and must no longer be relied on as evidence of origin. A signature made with it shows only that the bytes match the manifest they were signed with, and because a signature carries no date, a verifier cannot tell when it was made."},{"keyId":"25adee0cb01f4550","publicKeyPem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAGXn2+iJSg74A0Us05mgSmZWBK3NdKz7tLYMEYwXWldY=\n-----END PUBLIC KEY-----\n","activeFrom":"2026-09-21"}]}