Starting in April 2012, PHP release tags have been signed in Git by the release managers for each branch. The following GnuPG keys can be used to verify these tags:
pub 2048R/9C0D5763 2015-06-09 [expires: 2024-06-06] Key fingerprint = 1A4E 8B72 77C4 2E53 DBA9 C7B9 BCAA 30EA 9C0D 5763 uid Anatol Belski <ab@php.net> pub 2048R/33CFC8B3 2014-01-14 [expires: 2020-01-13] Key fingerprint = 6E4F 6AB3 21FD C07F 2C33 2E3A C2BF 0BC4 33CF C8B3 uid Ferenc Kovacs <tyrael@php.net>
pub 2048R/33CFC8B3 2014-01-14 [expires: 2020-01-13] Key fingerprint = 6E4F 6AB3 21FD C07F 2C33 2E3A C2BF 0BC4 33CF C8B3 uid Ferenc Kovacs <tyrael@php.net> pub 2048R/90D90EC1 2013-07-18 [expire : 2016-07-17] Key fingerprint = 0BD7 8B5F 9750 0D45 0838 F95D FE85 7D9A 90D9 0EC1 uid Julien Pauli <jpauli@php.net>
pub 2048R/90D90EC1 2013-07-18 [expire : 2016-07-17] Key fingerprint = 0BD7 8B5F 9750 0D45 0838 F95D FE85 7D9A 90D9 0EC1 uid Julien Pauli <jpauli@php.net> pub 4096R/7267B52D 2012-03-20 [expires: 2016-03-19] Key fingerprint = 0B96 609E 270F 565C 1329 2B24 C13C 70B8 7267 B52D uid David Soria Parra <dsp@php.net>
pub 2048D/5DA04B5D 2012-03-19 Key fingerprint = F382 5282 6ACD 957E F380 D39F 2F79 56BC 5DA0 4B5D uid Stanislav Malyshev (PHP key) <smalyshev@gmail.com> uid Stanislav Malyshev (PHP key) <stas@php.net> uid Stanislav Malyshev (PHP key) <smalyshev@sugarcrm.com>
pub 4096R/7267B52D 2012-03-20 [expires: 2016-03-19] Key fingerprint = 0B96 609E 270F 565C 1329 2B24 C13C 70B8 7267 B52D uid David Soria Parra <dsp@php.net> pub 2048R/FC9C83D7 2012-03-18 [expires: 2017-03-17] Key fingerprint = 0A95 E9A0 2654 2D53 835E 3F3A 7DEC 4E69 FC9C 83D7 uid Johannes Schlüter <johannes@schlueters.de> uid Johannes Schlüter <johannes@php.net>