Users of the Hex and Alpine formats who attempted to install a repository signing key were served an invalid public key. These signing keys are installed automatically using the Cloudsmith setup script and would manifest as signature validation errors. This has now been resolved. Affected users should remove the key from their environments and reinstall using the well-defined URL / script. Apologies to all affected users.