On Wed, Dec 28, 2016 at 09:10:15PM -0500, Leo Famulari wrote:
> I see this in the log:
> 
> $ git log --show-signature 6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91
> commit 6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91
> gpg: Signature made Wed 28 Dec 2016 08:38:21 PM EST
> gpg:                using RSA key 91CCDB9B48541B99
> gpg: BAD signature from "Tobias Geerinckx-Rice <me@tobias.gr>" [unknown]
> Author: Tobias Geerinckx-Rice <me@tobias.gr>
> Date:   Wed Dec 28 23:01:49 2016 +0100
> 
>     gnu: python-prompt-toolkit: Update to 1.0.9.
>     
>     * gnu/packages/python.scm (python-prompt-toolkit): Update to 1.0.9.
> 
> Does anyone else get the same result? Any ideas?
> 
> Tobias, what version of GnuPG are you using?
> 
> I'm using:
> 
> gnupg	2.1.17	/gnu/store/1sa7k3x3y3chdl31p7y7x3sa7p9h1qa3-gnupg-2.1.17
> 
> ... which is built from Guix commit 791ac6a68d1e4bc80f4760cd968cb6c26dbab9ba.

I'm also unable to verify the signature of two more commits, as below.
I've attached a handy Git signature verifier script.

commit e0f8a520eda6b86a71f99eddf2c6968a95c8de0e
gpg: Signature made Thu 24 Nov 2016 08:21:51 PM EST
gpg:                using RSA key 91CCDB9B48541B99
gpg: BAD signature from "Tobias Geerinckx-Rice <me@tobias.gr>" [unknown]
Author: Tobias Geerinckx-Rice <me@tobias.gr>
Date:   Thu Nov 24 19:28:52 2016 +0100

    gnu: miniupnpc: Improve synopsis and description.
    
    * gnu/packages/upnp.scm (miniupnp)[synopsis, description]: Edit, fix typos,
    add some relevant (search) terms from the home page, and expand acronyms.

commit 7d162df8ce4dc90c681ff627b2ed94c192e6342f
gpg: Signature made Thu 15 Dec 2016 09:08:42 PM EST
gpg:                using RSA key 91CCDB9B48541B99
gpg: BAD signature from "Tobias Geerinckx-Rice <me@tobias.gr>" [unknown]
Author: Tobias Geerinckx-Rice <me@tobias.gr>
Date:   Thu Dec 15 23:17:52 2016 +0100

    gnu: mcelog: Update to 146.
    
    * gnu/packages/linux.scm (mcelog): Update to 146.