I'm seeing this on Lucid i386 with: $ apt-cache policy apt-cacher apt-cacher: Installed: 1.6.10ubuntu1 Candidate: 1.6.10ubuntu1 Version table: *** 1.6.10ubuntu1 0 500 http://gb.archive.ubuntu.com/ubuntu/ lucid/universe Packages 100 /var/lib/dpkg/status $ sudo apt-get update Hit http://gb.archive.ubuntu.com lucid Release.gpg Hit http://gb.archive.ubuntu.com/ubuntu/ lucid/main Translation-en_GB ... Hit http://gb.archive.ubuntu.com lucid-updates/multiverse Packages Hit http://gb.archive.ubuntu.com lucid-updates/multiverse Sources Fetched 11.0MB in 1min 6s (167kB/s) Reading package lists... Done W: GPG error: http://gb.archive.ubuntu.com lucid Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key