diff --git a/.gitignore b/.gitignore
index f0ac924..804f1f5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,2 @@
-/gpgkey-*.gpg
 /flashrom-*.tar.bz2
 /flashrom-*.tar.bz2.asc
diff --git a/58A4868B25C7CFD662FB0132A3EB95B8D9780F68 b/58A4868B25C7CFD662FB0132A3EB95B8D9780F68
new file mode 100644
index 0000000..5efab45
--- /dev/null
+++ b/58A4868B25C7CFD662FB0132A3EB95B8D9780F68
@@ -0,0 +1,54 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Comment: 58A4 868B 25C7 CFD6 62FB  0132 A3EB 95B8 D978 0F68
+Comment: David Hendricks (packaging key) <david.hendricks@gmail.
+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+=pcMx
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/flashrom.spec b/flashrom.spec
index 0c2f5a4..6878b3f 100644
--- a/flashrom.spec
+++ b/flashrom.spec
@@ -7,7 +7,7 @@ URL:		https://flashrom.org
 
 Source0:	https://download.flashrom.org/releases/%{name}-v%{version}.tar.bz2
 Source1:	https://download.flashrom.org/releases/%{name}-v%{version}.tar.bz2.asc
-Source2:	gpgkey-58A4868B25C7CFD662FB0132A3EB95B8D9780F68.gpg
+Source2:	https://keys.openpgp.org/vks/v1/by-fingerprint/58A4868B25C7CFD662FB0132A3EB95B8D9780F68
 
 # upstream already: https://review.coreboot.org/c/flashrom/+/38939
 Patch0:    0001-Install-the-man-file-when-using-meson-as-a-buildsyst.patch
diff --git a/sources b/sources
index cefe466..ca44317 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,2 @@
-SHA512 (gpgkey-58A4868B25C7CFD662FB0132A3EB95B8D9780F68.gpg) = 656d1acc38955794be905f42ebe73eda24ba1ee1f6df13a1e9ab7353d69c7786ed7a06e0dc23db9dbadb223a8e0891c7bf8520fec66561b798b14a0534b12d26
 SHA512 (flashrom-v1.2.tar.bz2) = 8e01395a54d0d1344bc55e7e4975f43bb8e59ebe83fb5f2766d14f76756d718b487254ce9a19ef4093aed04fb9d40fff5fe8f709b18c512f6e6fad894f83d7b8
 SHA512 (flashrom-v1.2.tar.bz2.asc) = 8c50e3eec79bcd70add3a75b5f5493805734444de91f1635303e70642efa1e03239edb352d1a962f750552406020c18de3e39226a2dceb17142667561042cd09