-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

For nm.debian.org, at 2026-03-28:
For the past 10 months, I have worked with Léo Haf on bitcoin-knots and
datum-gateway.

For this past work, Léo Haf sent mails using the email address leo@haf.ovh
which is the one they're using on nm.debian.org, and they signed their work and
email using a GPG key with fingerprint
DAED 928C 727D 3E61 3EC4  6635 F507 3C4F 4882 FFFC.

I've made sure that they are able to decrypt encrypted messages sent to this key
and that they're able to sign messages with the same key.

Due to the long-term interactions we had, I'm convinced that Léo Haf as they
present themselves on nm.debian.org is the rightful owner of both email
leo@haf.ovh and GPG key DAED 928C 727D 3E61 3EC4  6635 F507 3C4F 4882 FFFC.
-----BEGIN PGP SIGNATURE-----
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=rRPr
-----END PGP SIGNATURE-----