GitHub CLI Linux package PGP signing key rotation on September 5, 2026

TL;DR: The GitHub CLI PGP key rotation announcement [September 2026] explains who is affected and provides steps to prevent or resolve package installation and update problems.

Important

On Saturday, September 5, 2026, the current PGP key used to verify GitHub CLI Linux packages and repository metadata will expire. A new signing key has been published, and the updated keyring has contained both keys since April 8, 2026.

This change affects Linux users who installed GitHub CLI through our official APT or RPM package repositories before April 8, 2026 and have not refreshed their repository configuration or keyring.

Users who installed GitHub CLI through the official instructions after April 8, 2026 already have the new key and do not need to take action. This change does not affect installations from Homebrew, GitHub Releases, community package managers, or source code.

The GitHub CLI PGP key rotation announcement [September 2026] is the best place to confirm whether you are affected, find instructions for updating your keyring, ask questions, and share feedback.

Package installation and update commands may fail with messages such as:

W: Failed to fetch https://cli.github.com/packages/dists/stable/InRelease  The following signatures were invalid: EXPKEYSIG 23F3D4EA75716059 GitHub CLI <opensource+cli@github.com> The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 5612B36462313325

Transaction failed: Signature verification failed.
OpenPGP check for package ... from repo "gh-cli" has failed: Import of the key didn't help, wrong key?

The GPG keys listed for the "packages for the GitHub CLI" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: gh...
 GPG Keys are configured as: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x23F3D4EA75716059
...
Error: GPG check FAILED

The GPG keys listed for the "packages for the GitHub CLI" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.

 Failing package is: gh...
 GPG Keys are configured as: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x23F3D4EA75716059

Warning: File 'repomd.xml' from repository 'packages for the GitHub CLI' is signed with an unknown key '5612B36462313325'
...
    Warning: We can't verify that no one meddled with this file, so it might not be
    trustworthy anymore! You should not continue unless you know it's safe.
...
Repository 'packages for the GitHub CLI' is invalid.
[gh-cli|https://cli.github.com/packages/rpm] Valid metadata not found at specified URL
History:
 - Signature verification failed for repomd.xml
 - Can't provide /repodata/repomd.xml

gh-... (packages for the GitHub CLI): Signature verification failed [4-Signatures public key is not available]

Warning: File 'repomd.xml' from repository 'packages for the GitHub CLI' is signed with an unknown key '5612B36462313325'
...
    Warning: We can't verify that no one meddled with this file, so it might not be
    trustworthy anymore! You should not continue unless you know it's safe.
...
Repository 'packages for the GitHub CLI' is invalid.
[gh-cli|https://cli.github.com/packages/rpm] Failed to retrieve new repository metadata.
History:
 - Signature verification failed for repomd.xml

error: Verifying a signature using certificate 2C6106201985B60E6C7AC87323F3D4EA75716059 (GitHub CLI <opensource+cli@github.com>):
  1. Certificate 23F3D4EA75716059 invalid: certificate is not alive
      because: The primary key is not live
      because: Expired on 2026-09-05T12:44:10Z
  2. Key 23F3D4EA75716059 invalid: key is not alive
      because: The primary key is not live
      because: Expired on 2026-09-05T12:44:10Z