The release keys

The public keys with which the releases and the statements about keys are signed, each with its fingerprint. Save a key as a file and compare its fingerprint with the one here before verifying a release; a key that was dropped is no longer trusted, however old the signature.

K1

Role: the release key: signs the releases, the SHA256SUMS files and the security advisories
Fingerprint (SHA-256): bac45745f8c0de5b4abaf6c8b1e76f2c28c3a26adcf3d37d4faa47d04a573323

Public key (PEM)

-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEA+NLE2X2PJodzuEz/jGs013HtAGSTKYXljNVv2IfBl/I=
-----END PUBLIC KEY-----

K1-backup

Role: the backup key: signs the statements about keys
Fingerprint (SHA-256): b36c15af38b0954a69f198d6889a0bac16be130beadfcc0ebdd9492c2f0cf09d

Public key (PEM)

-----BEGIN PUBLIC KEY-----
MCowBQYDK2VwAyEAiAOMdRgQsC/o7Mqetzwpl0yomeFJ/xDPT1jhdcSLdc0=
-----END PUBLIC KEY-----

Keys dropped

No key has been revoked or retired.