<p>Instead of fetching the keys from keyservers by fingerprint, you can now get the keys actually used from <a href="https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys" rel="noreferrer">https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys</a>. This repository contains all of the guix attestations for Bitcoin Core releases, so it makes sense that the same repo should contain the listing of keys.</p>

CC BY-SA 4.0
2023-01-06T19:59:53.190Z
And have some plans to update this information on bitcoincore.org?
Because right now, the process is "broken" if you try to follow the steps indicated on the web.
Thank you for your answer.
decentralized.b
CC BY-SA 4.0
2023-01-06T22:26:17.973Z
Yes, the website will be updated.
Ava Chow
CC BY-SA 4.0
2023-01-06T16:25:18.300Z
2023-01-06T16:25:18.300Z
Ava Chow
<p>Yesterday this <a href="https://github.com/bitcoin/bitcoin/commit/296e88225096125b08665b97715c5b8ebb1d28ec" rel="noreferrer">PR</a> was merged into the Bitcoin repository, and the process described at <a href="https://bitcoincore.org/download" rel="noreferrer">https://bitcoincore.org/download</a> mentions that to validate the source code, you must download the txt file with some of the devs' signatures.</p>
<p>Now that process is no longer valid because the file was deleted.
What will be the process to validate the source code download from now on?</p>
<p>I reviewed another answer like <a href="https://bitcoin.stackexchange.com/questions/50185/how-to-verify-bitcoin-core-release-signing-keys/50186#50186">this</a> but I can find any related to my question.</p>

<bitcoin-core><signature><validation><pgp>
Bitcoin Core file with the signing keys was removed from repo. How is the process supposed to be now?
decentralized.b
# Bitcoin Core file with the signing keys was removed from repo. How is the process supposed to be now?

(Asked by: username_0 on 2023-01-06)

Yesterday this [PR](https://github.com/bitcoin/bitcoin/commit/296e88225096125b08665b97715c5b8ebb1d28ec) was merged into the Bitcoin repository, and the process described at <https://bitcoincore.org/download> mentions that to validate the source code, you must download the txt file with some of the devs' signatures.

Now that process is no longer valid because the file was deleted.
What will be the process to validate the source code download from now on?

I reviewed another answer like [this](https://bitcoin.stackexchange.com/questions/50185/how-to-verify-bitcoin-core-release-signing-keys/50186#50186) but I can find any related to my question.

**Tags:** bitcoin-core, signature, validation, pgp


---

## 1 answers

### Answer by username_1 on 2023-01-06. Score: 5

Instead of fetching the keys from keyservers by fingerprint, you can now get the keys actually used from <https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys>. This repository contains all of the guix attestations for Bitcoin Core releases, so it makes sense that the same repo should contain the listing of keys.

> **Comments:**
> **username_0**: And have some plans to update this information on bitcoincore.org? Because right now, the process is "broken" if you try to follow the steps indicated on the web. Thank you for your answer.  
> **username_1**: Yes, the website will be updated.  

---

