On 11 Jan 2018, at 18:22, Jose Luis Rivero <jriv...@openrobotics.org> wrote: > > On Thu, Jan 11, 2018 at 6:52 PM, James Clarke <jrt...@debian.org> wrote: > > Yes, but you need ssh access to coccia, i.e. be a DD. Looking on there at > /srv/ftp-master.debian.org/log/current: > > > 20180111171905|process-upload|dak|ignition-math2_2.9.0+dfsg1-1_source.changes|Error > > while loading changes: No valid signature found. (GPG exited with status > > code 0) > > gpg: Signature made Tue Jan 9 22:50:01 2018 UTC > > gpg: using RSA key A08161BBEC1CC063961459035E946C090AFF0427 > > gpg: issuer "jriv...@osrfoundation.org" > > gpg: Good signature from "Jose Luis Rivero <jriv...@osrfoundation.org>" > > [expired] > > gpg: WARNING: Using untrusted key! > > Your key has expired, or at least the copy in the keyring. Note that the > keyring is uploaded manually around once a month, so even if you renew your > key > and upload it to the keyservers, you won't be able to upload anything for a > while and will need sponsorship. > > > That makes sense. The best way of knowing when the update is done is probably > looking into the keyring repository log, right? > https://anonscm.debian.org/git/keyring/keyring.git/log/
Yes, I think that's updated at the same time as what's on ftp-master, and if not it's certainly close (and the best you can do without SSH access). James