# project keyring
the **libk project keyring** contains the public PGP keys of the team members who are authorized to cut an official libk release. for security reasons, the keyring is *not* part of the libk repository itself; only those with root access to the libk server have write access to it. the keyring is always signed by the current project maintainer; always verify this signature before relying on keyring signatures for authentication.

  * **keyring URL:**

you can find individual developer PGP fingerprints on the [personnel roster](/wiki?name=roster), but **never** use that page to authenticate a release; always use the dedicated project keyring. not all developers are authorized to issue a release tarball.