JWK Set — public keys for certificate verification

GET 
/.well-known/verification-key.json

No authentication required. Returns the public keys used to sign verification certificates, in JWK Set format (RFC 7517 + RFC 8037). Verifiers fetch this once and cache it; the cert's signature.kid identifies which key in the set was used.

v1 publishes a single Ed25519 key. The structure supports multiple keys for rotation.

Responses

200

JWK Set