Snapshot 10952
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Our security address Contact: security@pingidentity.com Our public openPGP keys For artifact signatures: https://keys.openpgp.org/vks/v1/by-fingerprint/A913A88FC21AC4E7EB52D44B45E764CA099D3220 Expires: 8/4/2031 For encrypting emails sent to Ping: https://keys.openpgp.org/vks/v1/by-fingerprint/DDC83F4D96620E2FDB9785E420925A72CF511FC2 Expires: 12/31/2027 Artifact signature verification with PingIdentity's public PGP key Retrieve our public key, import it to your gpg key ring and verify the artifact's signature. $ curl https://keys.openpgp.org/vks/v1/by-fingerprint/A913A88FC21AC4E7EB52D44B45E764CA099D3220 | gpg --import $ gpg --verify <artifact-name>.zip.asc <artifact-name>.zip Alternatively, you can import the public key from either OpenPGP's or MIT's server: $ gpg --keyserver pgp.mit.edu --recv-key 0x45E764CA099D3220 OR $ gpg --keyserver keys.openpgp.org --recv-key 0x45E764CA099D3220 Please note that unless you sign our public key with your private key, signature verification will throw a warning saying "This key is not certified trusted signature!" and "There is no indication that the signature belongs to the owner.". If you would like to verify the public key, please don't hesitate to reach out to the email address above. Our public Cosign key for container image signature verification for Ping product images published to Docker Hub: For verifying signed container images (Sigstore/Cosign, KMS-backed): https://download.pingidentity.com/public/ping-cosign-prod-v1.pub Fingerprint (SHA-256 DER): a0047fc42c554bc105fed4642bab36eb1f5871b810a2c5115664f508958fe586 Container image signature verification with Ping's Cosign public key Download the public key and verify a signed image by digest: $ curl -O https://download.pingidentity.com/public/ping-cosign-prod-v1.pub $ cosign verify --key ping-cosign-prod-v1.pub --private-infrastructure <image>@<digest> Signatures are stored as OCI artifacts in the same registry alongside the image. This file has also been signed with the PGP artifact signing key listed above for additional assurance: https://www.pingidentity.com/.well-known/security.txt.asc More about Security at PingIdentity: https://www.pingidentity.com/en/company/security-at-ping-identity.html