Hi all. Recent releases (el10 in particular) started to complain about a SHA-1 algorithm in use for our release key (https://download.ceph.com/keys/release.asc). I have re-signed the portion of the key that was using the obsolete algorithm and the new key is available at the same location. You can tell the new key because it's 1660 bytes, and it has no "Version:" string in the text. Also, it will cleanly import into el10 rpm, whereas the original does not. This will fix el10 rpm's failure to verify the signature on .rpm files: error: Verifying a signature using certificate 08B73419AC32B4E966C1A330E84AC2C0460F3994 (Ceph.com (release key) <security@ceph.com>): 1. Certificate E84AC2C0460F3994 invalid: policy violation because: No binding signature at time 2025-10-03T17:18:24Z If you experience such errors, download the new key from https://tracker.ceph.com/issues/74861 and use rpm --import to store it in rpm's keyring. Details are in https://tracker.ceph.com/issues/74861. Feel free to email with questions. tl;dr: update your release.asc Ceph package-signing key.