For nm.debian.org, at 2022-11-20 For the past 2 years, I have worked with Vasyl Gello on kodi packaging. For this past work, Vasyl Gello sent mails using the email address vasek.gello@gmail.com which is the one they're using on nm.debian.org, and they signed their work (I'm talking git commits as well as signed tarballs) using a GPG key with fingerprint 11C6 2C63 4CC6 1C07 74A7 EE12 2C51 41A1 5285 EC0A. He also has done that very consistently, though I haven't seen many gpg-signed mails, all his git commits and tags have been signed. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Vasyl Gello as they present themselves on nm.debian.org is the rightful owner of both email vasek.gello@gmail.com and GPG key 11C6 2C63 4CC6 1C07 74A7 EE12 2C51 41A1 5285 EC0A.