Thanks for the report. There have been recent discussions elsewhere about our old practice of hosting PGP public keys on python.org and have come to the conclusion that having them on the same website as the files to be downloaded is a bad practice as it provides no additional security and, worse, could provide an attack vector if somehow python.org security were compromised. Thus we have updated the PGP section of the Download files and will no longer provide the combined pubkeys.txt file. The bottom line is that public keys should be obtained from a public key server or some other mechanism that you trust.