I swear I looked all over the website and downloads page [1]. But I cannot find what key the tarballs are signed with to import to verify. I am so sorry for bothering a mailing list with such noise, especially because as much as I try I know they have to be somewhere and I am just missing it. Thanks in advance. [1] https://alioth.debian.org/frs/?group_id=30105