For nm.debian.org, at 2026-03-28: For the past 10 months, I have worked with Léo Haf on bitcoin-knots and datum-gateway. For this past work, Léo Haf sent mails using the email address leo@haf.ovh which is the one they're using on nm.debian.org, and they signed their work and email using a GPG key with fingerprint DAED 928C 727D 3E61 3EC4 6635 F507 3C4F 4882 FFFC. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Léo Haf as they present themselves on nm.debian.org is the rightful owner of both email leo@haf.ovh and GPG key DAED 928C 727D 3E61 3EC4 6635 F507 3C4F 4882 FFFC.