Public-key cryptosystems without poly-time quantum attacks
McEliece

NTRU

Multivariate

If you mean "syntactically public key" instead of "implies the existence of secure key agreement",

then there is also hash-based signatures.