The LangSyn PKI Registry
Public keys you can check.
The PKI Registry binds post-quantum public keys to each identifier, so a signature can be traced back to who made it. Look up a key, verify a signature, and follow the endorsements that vouch for it — the trust layer for the whole ecology.
This registry was replaced on 15 November 2026. The new registry started empty: a key or an endorsement recorded with the one before it has to be recorded again. Its root key is the same Ed25519 key as before, now the first half of a composite with ML-DSA-65.
What it is
From a name to a key you can trust
A signature is only as good as your confidence in the key behind it. The registry publishes each identifier's public keys and the endorsements they have collected, so anyone can verify a signature and judge how much to trust the signer — without a central authority deciding for them.
Keys bound to names
Every identifier in the OID Registry can publish its public keys here: ML-DSA-65, alone or with Ed25519 as one composite key. An Ed25519 key alone is refused. Resolve the name, get the key, check the signature.
A web of trust
Keys endorse other keys. The endorsements form a graph you can walk, so trust is something you trace and weigh — not something handed down.
Everything is checkable
Records, endorsements, and the registry's own identity are all public and signed. Nothing asks to be believed on faith; it all verifies.
Use it
Look up, verify, endorse
The registry answers people in the browser and machines over a small JSON API. Same records, two front doors.
Look up
Resolve an identifier to its public keys, active and revoked, and the endorsements on record. No account required to read.
Verify
Check a signature against a key the registry holds, right in the browser — paste the key id, the message and the signature.
Machine API
Look up keys and verify over JSON under /v1/; registering, revoking and endorsing a key are signed requests to POST /v1/keys. A /health endpoint serves monitors.
The ecology
Part of LangSyn
The PKI Registry is one of the public services LangSyn runs in the open. Its companion mints the identifiers these keys are bound to.
LangSyn
An introduction to DKE, CTX and Antheos, the three projects LangSyn builds, with a link to each.
OID Registry
The identity root: it mints the origin identifiers that these public keys are bound to, so every key belongs to a named origin.