In der Nachricht vom Tuesday, 6 September 2022 16:29:35 CEST steht:
> On Tue, Sep 06, 2022 at 03:53:08PM +0200, Adrian Zaugg wrote:
> > In der Nachricht vom Tuesday, 6 September 2022 15:02:47 CEST steht:
> > > At that point you use wget to grab the devuan-keyring package
> > > http://deb.devuan.org/merged/pool/DEVUAN/main/d/devuan-keyring/devuan-ke
> > > yrin g_2022.09.04_all.deb and store that at /target, so you can follow
[...]
> I must say that you are mistaken about that.
Thank you, you are right, don't know what I did to not see this correctly.
Sorry for the noise.

But I hope you do not oppose when I insist to use https to download the
keyring (and thus from pkgmaster.devuan.org), there is no DNSSEC on devuan.org
and I believe the package itself is not signed:

$ dpkg-sig --list devuan-keyring_2022.09.04_all.deb
Processing devuan-keyring_2022.09.04_all.deb...
$

Regards, Adrian.