Public keys

Happonomy signs each channel manifest (for example alpha.json) with minisign. A manifest’s signature must match one of these two public keys. The installers carry the same two keys; this page is made from them.

Key	minisign public key
The CI key: it signs every release and the monthly refresh	RWR3FugwULgFneOK2w98cIpSzUD9BAFixr5+IDM5NxR9n9bkguhZ0mI1
The offline backup key: it is kept off line, for emergencies	RWQi5Mj6AgIPOzxx3x0ci4Bzn7f5VBgjy8o0ZHOZ4ddLbYqlBln0Q1VV

To check a manifest’s signature:

minisign -V -m alpha.json -P <key>

Install and verify gives every step of the check.