For nm.debian.org, at 2026-05-27: For the past few months, I have worked with Juan Manuel Méndez Rey on several Debian packages. For this past work, Juan Manuel Méndez Rey sent mails using the email address juan.mendezr@proton.me which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint 2A84 0ED0 0DE6 69F4 219B 8B33 02A7 9E3B 8215 1695. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Juan Manuel Méndez Rey as they present themselves on nm.debian.org is the rightful owner of both email juan.mendezr@proton.me and GPG key 2A84 0ED0 0DE6 69F4 219B 8B33 02A7 9E3B 8215 1695.