By publishing this certificate over HTTPS, the current controller of eternalist.moe asserts that signatures made by a valid signing-capable subkey certified by it are its signatures over the exact signed bytes.
This assertion is medium-independent. It covers Git commits and tags, release manifests, documents, messages, and detached signatures. It proves possession of private-key material, not a civil identity, an unsigned author field, or freedom from key compromise.
Certificate
- OpenPGP certificate
AFAB F475 0293 58A2 8A34 C29C F78A 2BB6 03A2 3BB2- Current Git signing subkey
4BE3 9752 DF2F 0639 C8C4 DC9A CA38 C246 9846 2CA3
Expires- User ID
eternalist <main@eternalist.moe>
The complete primary fingerprint is the durable identifier. Short key IDs are not substitutes for it. The Git signing subkey is an expiring instrument certified by the primary key and may be replaced without changing that identity.
Verification
Retrieve the certificate through the Web Key Directory and inspect its fingerprints:
gpg --auto-key-locate clear,wkd --locate-external-keys main@eternalist.moe
gpg --fingerprint 'AFAB F475 0293 58A2 8A34 C29C F78A 2BB6 03A2 3BB2'
git verify-commit COMMIT
git verify-tag TAG
gpg --verify SIGNATURE FILE
The linked GitHub account publishes the same certificate. GitHub’s “Verified” record establishes what GitHub accepted when a commit entered its repository network; retrieve this certificate again when current expiration or revocation state matters.
Rotation and revocation
Signing subkeys will normally rotate beneath this certificate. A replacement primary certificate will receive its own fingerprinted archive URL and, when the old private key remains available, a transition signed by both certificates. Revocation is published by updating the affected public certificate, never by removing the evidence.