I use OpenPGP signatures to verify commits, releases, and other material published by me.
The public key is available here: pgp-key.asc
Fingerprint
1054 38C0 1953 F11A B9D1 F373 0774 DA1C 332B B561Key details
Key ID: 0774DA1C332BB561
Identities: Lokesh Kumar N. <hi@loke.sh>
Lokesh Kumar N. <lokesh@navikarana.io>
Primary key: Ed25519 (signing and certification)
Subkey: cv25519 (encryption)
Created: 12 August 2026
Expires: 11 August 2028Import the Key
curl -fsSL https://loke.sh/pgp-key.asc | gpg --importVerify the Imported Key
gpg --fingerprint 0774DA1C332BB561
Always compare the full fingerprint when verifying the key.