How to renew expired Hashicorp APT repository key

If you are using APT package repositories for software from Hashicorp (for example Vault), you most likely get such an error now:

root@trixie:~# apt update
Hit:1 http://deb.debian.org/debian trixie InRelease
Get:2 https://apt.releases.hashicorp.com trixie InRelease [12.9 kB] 
Hit:3 http://deb.debian.org/debian trixie-updates InRelease         
Err:2 https://apt.releases.hashicorp.com trixie InRelease
  Sub-process /usr/bin/sqv returned an error code (1), error message is: Missing key D55C0D1AC78A8D8126CB631CFC9CA96ACA026560, which is needed to verify signature.
Hit:4 http://deb.debian.org/debian-security trixie-security InRelease
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP signature verification failed: https://apt.releases.hashicorp.com trixie InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Missing key D55C0D1AC78A8D8126CB631CFC9CA96ACA026560, which is needed to verify signature.
W: Failed to fetch https://apt.releases.hashicorp.com/dists/trixie/InRelease  Sub-process /usr/bin/sqv returned an error code (1), error message is: Missing key D55C0D1AC78A8D8126CB631CFC9CA96ACA026560, which is needed to verify signature.
W: Some index files failed to download. They have been ignored, or old ones used instead.

The reason for this error is that the GPG key, that is used to sign the packages, has either expired or has been rotated.

To update the key installed in your local filesystem, run this command:

root@trixie:~# wget -nv -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
File '/usr/share/keyrings/hashicorp-archive-keyring.gpg' exists. Overwrite? (y/N) 2026-09-22 07:28:04 URL:https://apt.releases.hashicorp.com/gpg [1725/1725] -> "-" [1] y

Confirm with "y" to overwrite the old key.

apt-update (or apt-get update) now runs through again.