PGP signature problem

HI i recently install bisq but im stuck with verification process, the siteweb “bisq” give’s me an old key: the one of “Alegandro Garcia” but it expired. So I find the public key of Henrik janssen but this time I needed the appropriate PGP signature for this public key, but I can’t find it on the official website and no one is talking about it. Even ChatGPT can’t help me…

Bisq 1.9.22 was signed with E222AA02. E222AA02.asc is in the assets at Release v1.9.22 · bisq-network/bisq · GitHub
Details are at the wiki, but keys may vary between versions https://bisq.wiki/Downloading_and_installing#Bisq2_specific_instructions

I see that this pgp signature: Bisq-64bit-1.9.22.exe.asc and your provided signature: E222AA02.asc are both emitted at the 24 december 2025 on the github page, but I’m afraid to use two signatures that don’t have the same syntax. I know it’s absurd. Could you tell me why the second signature is correct when the first one is the one that appears first on the official Bisq installation website?

So you confirm that this: E222AA02.asc is the real PGP signature of the key: Henrik Janssen that I previously certified; because if we are talking about the same thing, the pgp signature is needed to verify after the certification process, Is everything okay for now (because I previously use the first pgp signature: “Bisq-64bit-1.9.22.exe.asc” and “kleopatra” give’s me an error and inform me that the first pgp signature is incorrect) ?

maybe you get the error because the key you downloaded is expired, search for E222AA02 on any pgp directory and add it to your system

I am very confused, and I am not good with computers, but please, I just want to have the PGP signature for the Henrik Janssen public key. It has not expired because I certified it on Cleopatra. The pgp Bisq-64bit-1.9.22.exe.asc and E222AA02.asc do not work.

first you have to import the signing key which is E222…, then you verify the bisq…exe.asc, better if it’s in the same path as bisq…..exe, that’s the procedure, if you use kleopatra you should follow the GUI, otherwise I do it via gpg in linux shell

So I restart the process and I reinstalled the public key of henrik Jannsen, and I tried to “uncrypt/verify” the public key with the official pgp signature of bisq 1.9.22, wich is: Bisq-64bit-1.9.22.exe.asc.

This is the error message: The file The file C:\Users\yusuf\Downloads\387C8307.asc contains certificates and cannot be decrypted or verified.

sorry for late reply, but have you checked this already?

Since I am on linux, I just use gpg commands and I am not familiar with kleopatra anymore