For nm.debian.org, at 2026-05-07: For the past 1.8 years, I have worked with Ural Tunaboyu, mostly on Ubuntu, but also at the src:autopkgtest Debian package. For this past work, Ural Tunaboyu sent mails using the email address ural.tunaboyu@canonical.com which is the one they're using on nm.debian.org, and they signed their Ubuntu uploads using a GPG key with fingerprint 43BE 0BFA 6D80 4B7A 030D F490 6A3B 5AF0 CF48 3C50. I've made sure that they are able to decrypt encrypted messages sent to this key and that they're able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Ural Tunaboyu as they present themselves on nm.debian.org is the rightful owner of both email ural.tunaboyu@canonical.com and GPG key 43BE 0BFA 6D80 4B7A 030D F490 6A3B 5AF0 CF48 3C50.