The releases are tagged and signed in the PHP Git Repository. The following official GnuPG keys of the current PHP Release Manager can be used to verify the tags:
pub rsa4096 2021-04-01 [SC]
1198 C011 7593 497A 5EC5 C199 286A F1F9 8974 69DC
uid [ultimate] Pierrick Charron <pierrick@php.net>
sub rsa4096 2021-04-01 [E]
pub rsa4096 2021-04-26 [SC] [expires: 2025-11-24]
39B6 4134 3D8C 104B 2B14 6DC3 F9C3 9DC0 B969 8544
uid [ultimate] Ben Ramsey <ramsey@php.net>
sub rsa4096 2021-04-26 [E] [expires: 2025-11-24]
pub rsa4096 2021-03-26 [SC] [expires: 2030-03-26]
E609 13E4 DF20 9907 D8E3 0D96 659A 97C9 CF2A 795A
uid [ultimate] Sergey Panteleev <sergey@php.net>
uid [ultimate] Sergey Panteleev <sergey@s-panteleev.ru>
uid [ultimate] Sergey Panteleev <sergey@sergeypanteleev.com>
sub rsa4096 2021-03-26 [E] [expires: 2025-03-26]
pub 2048R/31CBD89E 2016-12-08
Key fingerprint = 5289 95BF EDFB A719 1D46 839E F9BA 0ADA 31CB D89E
uid Joe Watkins <krakjoe@php.net>
pub rsa4096 2021-04-26 [SC] [expires: 2025-11-24]
39B6 4134 3D8C 104B 2B14 6DC3 F9C3 9DC0 B969 8544
uid [ultimate] Ben Ramsey <ramsey@php.net>
sub rsa4096 2021-04-26 [E] [expires: 2025-11-24]
pub rsa4096 2021-04-01 [SC]
F1F6 9223 8FBC 1666 E5A5 CCD4 199F 9DFE F6FF BAFD
uid [ultimate] Patrick Allaert <patrickallaert@php.net>
sub rsa4096 2021-04-01 [E]
pub 4096R/70D12172 2017-04-14 [expires: 2024-04-21]
Key fingerprint = 1729 F839 38DA 44E2 7BA0 F4D3 DBDB 3974 70D1 2172
uid Sara Golemon <pollita@php.net>
pub rsa4096 2020-05-09 [SC] [expires: 2024-05-08]
BFDD D286 4282 4F81 18EF 7790 9B67 A5C1 2229 118F
uid [ultimate] Gabriel Caruso (Release Manager) <carusogabriel@php.net>
sub rsa4096 2020-05-09 [E] [expires: 2024-05-08]
pub rsa4096 2022-08-30 [SC] [expires: 2024-08-29]
2C16 C765 DBE5 4A08 8130 F1BC 4B9B 5F60 0B55 F3B4
uid [ultimate] Gabriel Caruso <carusogabriel@php.net>
sub rsa4096 2022-08-30 [E] [expires: 2024-08-29]
pub rsa4096 2021-04-26 [SC] [expires: 2025-11-24]
39B6 4134 3D8C 104B 2B14 6DC3 F9C3 9DC0 B969 8544
uid [ultimate] Ben Ramsey <ramsey@php.net>
sub rsa4096 2021-04-26 [E] [expires: 2025-11-24]
A full list of GPG keys used for current and older releases is also available.