Any idea where I can get the GPG key used for the signature files on downloads.asterisk.org?
For example http://downloads.asterisk.org/pub/telephony/asterisk/asterisk-18-current.tar.gz.asc.
Fingerprint is 5D984BE337191CE7
but despite googling and trying a few GPG key servers I was unable to locate it.
Update: Thanks to @jcolp for the hint. I was able to acquire the key with:
gpg2 --keyserver keys.gnupg.net --recv-keys 5D984BE337191CE7
gpg --verify asterisk-18-current.tar.gz.asc
gpg: assuming signed data in 'asterisk-18-current.tar.gz'
gpg: Signature made Tue Dec 22 21:11:45 2020 UTC
gpg: using RSA key 5D984BE337191CE7
gpg: Good signature from "Asterisk Development Team <asteriskteam@digium.com>" [unknown]