diff --git a/manifests/package/debian.pp b/manifests/package/debian.pp
index 9e7e31694..4d4f3ebfc 100644
--- a/manifests/package/debian.pp
+++ b/manifests/package/debian.pp
@@ -36,7 +36,7 @@
         apt::source { 'nginx':
           location   => "http://nginx.org/packages/${distro}",
           repos      => 'nginx',
-          key        => 'ABF5BD827BD9BF62',
+          key        => '573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62',
           key_source => 'http://nginx.org/keys/nginx_signing.key',
         }
       }
@@ -44,7 +44,7 @@
         apt::source { 'nginx':
           location   => "http://nginx.org/packages/mainline/${distro}",
           repos      => 'nginx',
-          key        => 'ABF5BD827BD9BF62',
+          key        => '573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62',
           key_source => 'http://nginx.org/keys/nginx_signing.key',
         }
       }
@@ -52,7 +52,7 @@
         apt::source { 'nginx':
           location          => 'https://oss-binaries.phusionpassenger.com/apt/passenger',
           repos             => 'main',
-          key               => '561F9B9CAC40B2F7',
+          key               => '16378A33A6EF16762922526E561F9B9CAC40B2F7',
           key_source        => 'https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key.txt',
           required_packages => 'apt-transport-https ca-certificates',
         }
diff --git a/spec/classes/package_spec.rb b/spec/classes/package_spec.rb
index 6b6ef6f49..a153efec8 100644
--- a/spec/classes/package_spec.rb
+++ b/spec/classes/package_spec.rb
@@ -67,7 +67,7 @@
       it { is_expected.to contain_apt__source('nginx').with(
         'location'   => "http://nginx.org/packages/#{operatingsystem.downcase}",
         'repos'      => 'nginx',
-        'key'        => 'ABF5BD827BD9BF62',
+        'key'        => '573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62',
         'key_source' => 'http://nginx.org/keys/nginx_signing.key'
       )}
       it { is_expected.to contain_anchor('nginx::package::begin').that_comes_before('Class[nginx::package::debian]') }
@@ -88,7 +88,7 @@
       it { is_expected.to contain_apt__source('nginx').with(
         'location'   => 'https://oss-binaries.phusionpassenger.com/apt/passenger',
         'repos'      => "main",
-        'key'        => '561F9B9CAC40B2F7',
+        'key'        => '16378A33A6EF16762922526E561F9B9CAC40B2F7',
         'key_source' => 'https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key.txt'
       )}
     end