On Mon, 21 Mar 2022 09:36:11 +0100, Daniel Wagner wrote: >Did you import 587C5ECA5D0A306C.asc from korg? Hi, no, I imported it from a keyserver. >I have very strong feelings when it comes to gpg and no they are not >the good ones. ;) I suspected a subkey, but OTOH it's odd that a check points to a missing subkey, without mentioning the key that needs to be imported. It's also odd that the needed key is available by a keyserver, but without the subkey included. Thank you, I imported from git and all is good now [1]. Regards, Ralf [1] [rocketmouse@archlinux ~]$ gpg --import /tmp/pgpkeys/keys/587C5ECA5D0A306C.asc gpg: key 587C5ECA5D0A306C: 17 signatures not checked due to missing keys gpg: key 587C5ECA5D0A306C: "Daniel Wagner <wagi@xxxxxxxxx>" 24 new signatures gpg: key 587C5ECA5D0A306C: "Daniel Wagner <wagi@xxxxxxxxx>" 2 new subkeys gpg: Total number processed: 1 gpg: new subkeys: 2 gpg: new signatures: 24 [snip] [rocketmouse@archlinux linux-rt]$ makepkg -s ==> Making package: linux-rt 4.19.235_rt106-0.1000 (Mon 21 Mar 2022 10:58:09 CET) [snip] ==> Verifying source file signatures with gpg... linux-4.19.235.tar ... Passed patch-4.19.235-rt106.patch ... Passed [snip]