diff --git a/pgpainless-core/src/main/java/org/pgpainless/key/info/KeyRingInfo.java b/pgpainless-core/src/main/java/org/pgpainless/key/info/KeyRingInfo.java
index a1818902..971d5a8e 100644
--- a/pgpainless-core/src/main/java/org/pgpainless/key/info/KeyRingInfo.java
+++ b/pgpainless-core/src/main/java/org/pgpainless/key/info/KeyRingInfo.java
@@ -347,6 +347,11 @@ public class KeyRingInfo {
             PGPSignature certification = signatures.userIdCertifications.get(userId);
             PGPSignature revocation = signatures.userIdRevocations.get(userId);
 
+            // Unbound user-id
+            if (certification == null) {
+                continue;
+            }
+
             // Not revoked -> valid
             if (revocation == null) {
                 probablyExpired.add(userId);