Home » The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository

The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository

by blackMOREOps
10 comments

I just tried to update one my Kali Virtual Machine and received the following error:

root@kali:~# 
root@kali:~# apt-get update
Get:1 http://kali.mirror.garr.it/mirrors/kali kali-rolling InRelease [30.5 kB]
Err:1 http://kali.mirror.garr.it/mirrors/kali kali-rolling InRelease
  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <[email protected]>
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://kali.mirror.garr.it/mirrors/kali kali-rolling InRelease: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <[email protected]>
W: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <[email protected]>
W: Some index files failed to download. They have been ignored, or old ones used instead.
root@kali:~

The following signatures were invalid EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository - blackMORE Ops -3

It seems like the APT GPG Key expired. Searched around and the found that the following solution worked for most people:

root@kali:~# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
Executing: /tmp/apt-key-gpghome.Ze2Ri87qe6/gpg.1.sh --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
gpg: key ED444FF07D8D0BF6: 133 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" 135 new signatures
gpg: Total number processed: 1
gpg:         new signatures: 135
root@kali:~#

The following signatures were invalid EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository - blackMORE Ops -4

After that, you simply try to run apt-get update and it should just work as normal.

The following signatures were invalid EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository - blackMORE Ops -1

Apparently the above solution didn’t work for few, here’s an alternative solution:

root@kali:~# wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
root@kali:~# apt install ./kali-archive-keyring_2018.1_all.deb

However, you need to ensure that your Kali Linux Repositories are correct, mine were as follows:

The following signatures were invalid EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository - blackMORE Ops -2

If you want a guide on how to fix you Kali Linux Official Repositories, follow this guide. Follow the Kali Rolling section.

Happy days!

You may also like

10 comments

Gurish March 18, 2018 - 1:13 pm

thanks mate this works perfect

Reply
hakdmodz April 15, 2018 - 2:32 pm

second repair option worked great cheers

Reply
Alexandre F April 29, 2018 - 12:38 am

Thanks a lot! Works great.

Reply
Wiktor May 23, 2018 - 4:54 pm

(+1) The only one true answer for this COMMON problem.

Reply
Wilson Keith Bradley August 14, 2018 - 7:32 am

Thanks a Million..

Reply
mack January 8, 2019 - 10:46 pm

ohhhhhh man you guys are great .after many tutorials tried last this one is worked for me.btw 2nd options is worked for me

Reply
Ed March 30, 2021 - 4:49 am

Oh, man. Thanks so much. Option 1 still works.

Reply
Zac May 27, 2021 - 4:16 am

works great

Reply
chuk January 30, 2022 - 2:19 am

tried to fix but I got gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation after I put in apt-key adv –keyserver hkp://keys.gnupg.net –recv-keys 7D8D0BF6

Reply
Justin Kahal February 1, 2022 - 7:44 pm

i got the same thing… are you also trying to run apt within wsl? I was looking at something the other day that was saying the issue might be related to having the right permissions within windows for your distro and/or an issue related to your PATH will get post my answer if i figure it out.

Reply

Leave your solution or comment to help others. Comment don't need registration or real email, so feel free.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

About Us

blackMORE Ops - touch-icon-72x72

blackMORE Ops” does not promote, encourages and excite hackers, its purpose is to make people aware that what is going around. Know Hacking but No Hacking!

Feature Posts

Newsletter