EXPKEYSIG debian ubuntu

Fix EXPKEYSIG ABF5BD827BD9BF62

nginx signing key <signing-key@nginx.com> — by NGINX

Error message
EXPKEYSIG ABF5BD827BD9BF62 nginx signing key <signing-key@nginx.com>

Fix commands for Arch Linux

Method 1 Refresh key via pacman-key

Refreshes all keys in the pacman keyring from keyservers. Slowest but most thorough.

Arch Linux — bash
$ sudo pacman-key --refresh-keys

Method 2 Receive specific key

Fetches the specific expired key and locally signs it to mark it as trusted.

Arch Linux — bash
$ sudo pacman-key --keyserver keyserver.ubuntu.com --recv-keys ABF5BD827BD9BF62
$ sudo pacman-key --lsign-key ABF5BD827BD9BF62

Method 3 Reinitialize keyring (nuclear option)

Reinitializes the entire pacman keyring. Use only if other methods fail.

Arch Linux — bash
$ sudo pacman-key --init
$ sudo pacman-key --populate archlinux

After importing the key

Run sudo apt-get update (or your distro's equivalent) again. If successful you should see Hit: lines with no EXPKEYSIG warnings. Still broken? Check that your /etc/apt/sources.list.d/ entry references the correct [signed-by=…] keyring path.