ubuntu's apt is still doing it - "the package has a bad signature" because the mirror is 3 years out of date. update the mirror list already.