PGP key for pkgsrc-security%NetBSD.org@localhost

[Taylor R Campbell <campbell+netbsd%mumble.net@localhost>]

(I am not subscribed to this list, so pleaase cc me in replies.)

The signature on

<http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/pkg-vulnerabilities>

was made from an RSA key with id BB402AD8, but I can't find this key
anywhere.  Every PGP key at

<http://ftp.NetBSD.org/pub/NetBSD/security/PGP/pkgsrc-security%NetBSD.org.asc@localhost>

has expired.  Where are we supposed to find a certificate for the
latest pkgsrc-security key?  I ask both for the current one, and in
general.