diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf
index f0b1a886..c7cfcf63 100644
--- a/targets/powerpc64le-base-any.conf
+++ b/targets/powerpc64le-base-any.conf
@@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b
 verify_platform = linux/amd64
 
 # tag: ppc64le
-keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:1c04da1c8946a9dee9e0fed1535d4a50790cb25b7faa9bdeae3094f768ae3b05
+keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:c71ef447d640eafeee59fc124a100f69b8ac4d36ad6eed3a242c8ff890fd73b3
 keyring_platform = linux/ppc64le
 
 # The keyring package is in this repository, so no keyring_from.
diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf
index ee2cdb83..b2915180 100644
--- a/targets/powerpc64le-base.conf
+++ b/targets/powerpc64le-base.conf
@@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:e82623936fa1a69700b48e98b
 verify_platform = linux/amd64
 
 # tag: ppc64le
-keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:1c04da1c8946a9dee9e0fed1535d4a50790cb25b7faa9bdeae3094f768ae3b05
+keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:c71ef447d640eafeee59fc124a100f69b8ac4d36ad6eed3a242c8ff890fd73b3
 keyring_platform = linux/ppc64le
 
 # The keyring package is in base-any. keyring_from names that target of this
diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf
index 7733d76c..bef28358 100644
--- a/targets/riscv64-core.conf
+++ b/targets/riscv64-core.conf
@@ -35,7 +35,7 @@ verify_platform = linux/amd64
 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the
 # x86_64 image keeps as its own; the image follows the port if that changes.
 # tag: riscv64
-keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d68d32735ee85b2a4e40e3850d7cc8341799214f0aa19aba0a3e0c349876e9bc
+keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d8122cc6b2d936edaf9086430701d93c81992f647297ef4c3a3b954dbf2d8270
 keyring_platform = linux/riscv64
 
 # The keyring package, installed from the snapshot before anything else is
diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf
index 682f7fcf..98976b5b 100644
--- a/targets/riscv64-extra.conf
+++ b/targets/riscv64-extra.conf
@@ -40,7 +40,7 @@ verify_platform = linux/amd64
 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the
 # x86_64 image keeps as its own; the image follows the port if that changes.
 # tag: riscv64
-keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d68d32735ee85b2a4e40e3850d7cc8341799214f0aa19aba0a3e0c349876e9bc
+keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:d8122cc6b2d936edaf9086430701d93c81992f647297ef4c3a3b954dbf2d8270
 keyring_platform = linux/riscv64
 
 # The keyring package is in core: verify installs it from the promoted