{
  "keys": [
    {
      "kty": "OKP",
      "crv": "Ed25519",
      "use": "sig",
      "alg": "EdDSA",
      "kid": "rifref-publisher-2026-01",
      "x": "FHWFq8_WizStK-vgMjuI0KGnmEo9lDCFVAjQBGE8PZA",
      "rotated_at": null
    }
  ],
  "note": "This document publishes RifRef's active ed25519 publisher signing key used to sign disclosure metadata on generated links. Verifiers should fetch this document fresh. On rotation, a new key is added with a new kid and the retired key's rotated_at is set to the rotation timestamp; retired keys remain published so historical signatures stay verifiable."
}