diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index cba552a..8a79a6a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -357,18 +357,18 @@ are part of a signed release tag.
 All releases are signed by at least one of the following collection of
 keys.
 
-  * E79F6D9E113529F4B1FFE4D5C4F974D70CEC2C5B
-  * 4739D329C9187A1C2795C20A02ABFDEC3A40545F
-  * 7535AB89220A5C15A728B75F74104CC7DCA5D7A8
-  * 827BC2320D535AEAD0540E6E2E66F65D99761A6F
-  * A88D7431E5BAAD0B6EAE550AC8D61D8BD4FA3C46
-  * 8F872885968EB8C589A32E9539ACC012896D450F
-  * 896B92AF738C974E0065BF42F2576BD366156BB9
-  * AA927AFD50AF7C6810E69FE8274F2C605359E31B
-  * BE2DED372287BC4EB2213E13A0C743848A638955
-  * 0F3476E4B2404F95EC41600683D5810F7911B020
-  * 4E82C72C6B3E58A7BC4FF8554909F84CA83BB867
-  * 5AEB1A2EB0D13F67E306AC59DC0CC81BE006FD85
+  * E79F6D9E113529F4B1FFE4D5C4F974D70CEC2C5B (expired)
+  * 4739D329C9187A1C2795C20A02ABFDEC3A40545F (expired)
+  * 7535AB89220A5C15A728B75F74104CC7DCA5D7A8 (expired)
+  * 827BC2320D535AEAD0540E6E2E66F65D99761A6F (expired)
+  * A88D7431E5BAAD0B6EAE550AC8D61D8BD4FA3C46 (expired)
+  * 8F872885968EB8C589A32E9539ACC012896D450F (expired)
+  * 896B92AF738C974E0065BF42F2576BD366156BB9 (expired)
+  * AA927AFD50AF7C6810E69FE8274F2C605359E31B (expired)
+  * BE2DED372287BC4EB2213E13A0C743848A638955 (expired)
+  * 0F3476E4B2404F95EC41600683D5810F7911B020 (expired)
+  * [4E82C72C6B3E58A7BC4FF8554909F84CA83BB867](keys/cagebreak_signing_key_11@project-repo.co.pub)
+  * [5AEB1A2EB0D13F67E306AC59DC0CC81BE006FD85](keys/cagebreak_signing_key_12@project-repo.co.pub)
 
 Should we at any point retire a key, we will only replace it with keys signed
 by at least one of the above collection.
@@ -459,3 +459,4 @@ The release procedure outlines the process for a release to occur.
   * [ ] Upload archives and signatures as release assets
   * [ ] Delete feature branches if appropriate
   * [ ] Manage package release
+
diff --git a/SECURITY.md b/SECURITY.md
index b232113..7988ef2 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -18,10 +18,10 @@ We try to respond to everything that is not obvious spam.
 If you can, please encrypt your email with the appropriate GPG key found
 in `keys/` and sign your message with your own key.
 
-* B15B92642760E11FE002DE168708D42451A94AB5
-* F8DD9F8DD12B85A28F5827C4678E34D2E753AA3C
-* 3ACEA46CCECD59E4C8222F791CBEB493681E8693
-* 0A268C188D7949FEB39FD1462F2AD980247E4918
+* B15B92642760E11FE002DE168708D42451A94AB5 (expired)
+* F8DD9F8DD12B85A28F5827C4678E34D2E753AA3C (expired)
+* 3ACEA46CCECD59E4C8222F791CBEB493681E8693 (expired)
+* [0A268C188D7949FEB39FD1462F2AD980247E4918](keys/cagebreak@project-repo.co.pub)
 
 Note that our keys are signed by cagebreak signing keys.