-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

For nm.debian.org, at 2022-04-13:
For the past month, I have worked with Mohammed Bilal on QA work and autopkgtest for
debian med packages. Prior to that I have also seen mails from them on the debian-ruby
mailing list.

For all past work, Mohammed Bilal sent mails using the email address mdbilal@disroot.org
which is the one they're using on nm.debian.org.

I made the following checks on their keys:

- - Checked gpg signature on email, both in personal correspondence and on
  mailing lists which is the same as their key used on nm.d.o
- - Checked signed commits from them indicating good signatures
- - Made sure that they are able to decrypt messages encrypted with their
  GPG key B3F5945285219E1F

Due to the past interactions we had, I'm convinced that Mohammed Bilal as they
present themselves on nm.debian.org is the rightful owner of both email
mdbilal@disroot.org and GPG key 2D65 BC1E B966 5A6E 97F9  730A B3F5 9452 8521 9E1F.
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPpmlJvXcwMu/HO6mALrnSzQzafEFAmJWx0sACgkQALrnSzQz
afFKaw/9EQc9gJXl3XtLv85uLIGA4b7cw39Bop10PvuX4QDQLONP5uyK8ecjRW7V
MhLMg6IK98k5/Ka8ykeqXkpO+jfe01a7Jg1JgHJ/i+bSa+wAxHhcHE2PVmCG9ah1
vdvlCx9GH9lSVxM+MSHuoFHpT4/FkdjYCUlWWDgTRRU2OQgvUZlJCZfKT6D9UOyl
JQrleKvPYEt/pDLO/s2MuFto+DNMRUa9IvT1fM1kv6N0Rr11G+iJwf4rqlP/rbKR
unfYxDOgbNVl7V55iDB4eosbXLzwMvncwtLDZqRRb5z53JVBsa9ljX03zRwPiniV
L4nGImmOli4j4cf7oEtCNOt6eN511nxwaiolWVDiZrdLcs5mK8n0huIGyESip2FD
RgzSVd5poW6U5qU2ObrAF7oNQ/UsdJDG+nZShzMMJkZlZOjw+XbvYNW9N4/CFdIs
FsEM8+GtWF4YlUS5njIr8fQmIxDWTl75bp08LV6lb1VBjX6/p1kHQrMx6211MC8Z
/Qbj8biJt5U9rSObIWnuEClXiwI4EDWFkm13rMRZdOBCrz/KqMdHXlnvjXlCfTaI
yFTpkywd/F5nBObSFnu0mbC/tGQpdr5PEJLFV9+0uz9IUNb8ean1uPf3APjQlOLN
hTV/RcWRru4tcWOKuESezUSpS1YkR1w+HM5udPki/+HQydEphEE=
=FcF+
-----END PGP SIGNATURE-----