EXPKEYSIG debian ubuntu

Fix EXPKEYSIG ABF5BD827BD9BF62

nginx signing key <signing-key@nginx.com> — by NGINX

Error message
EXPKEYSIG ABF5BD827BD9BF62 nginx signing key <signing-key@nginx.com>

Fix commands for Generic (GnuPG)

Method 1 GnuPG keyserver lookup

Fetches the key from a public keyserver using GnuPG. Works on any distro with gpg installed.

Generic (GnuPG) — bash
$ gpg --keyserver keyserver.ubuntu.com --recv-keys ABF5BD827BD9BF62
$ gpg --list-keys ABF5BD827BD9BF62

Method 2 Direct download

Downloads and imports the key file directly from the vendor.

Generic (GnuPG) — bash
$ curl -fsSL https://nginx.org/keys/nginx_signing.key | gpg --import

After importing the key

Run sudo apt-get update (or your distro's equivalent) again. If successful you should see Hit: lines with no EXPKEYSIG warnings. Still broken? Check that your /etc/apt/sources.list.d/ entry references the correct [signed-by=…] keyring path.