diff --git a/.SRCINFO b/.SRCINFO
index 9fa9fbde45ed..8b95899b06b0 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -15,7 +15,7 @@ pkgbase = mcrecover
 	source = http://gerbilsoft.soniccenter.org/gc-tools/mcrecover/v0.2/mcrecover-0.2.tar.gz
 	source = http://gerbilsoft.soniccenter.org/gc-tools/mcrecover/v0.2/mcrecover-0.2.tar.gz.asc
 	sha256sums = 6c9897553bae6794c27aab3d1978c50e2d38df6f54e80f06e587f339e6bb66a9
-	sha256sums = 43898f11b2d9012d97685c7637d4a337ff3852c9e4ee9d1c9df12cae5a69543b
+	sha256sums = SKIP
 
 pkgname = mcrecover
 
diff --git a/PKGBUILD b/PKGBUILD
index 33d7d9d3cf2d..b218e77a8881 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -10,11 +10,10 @@ license=('GPL2')
 depends=('qt4' 'libpng' 'pcre' 'hicolor-icon-theme')
 makedepends=('cmake')
 install=$pkgname.install
-source=("http://gerbilsoft.soniccenter.org/gc-tools/$pkgname/v$pkgver/$pkgname-$pkgver.tar.gz"
-        "http://gerbilsoft.soniccenter.org/gc-tools/$pkgname/v$pkgver/$pkgname-$pkgver.tar.gz.asc")
-# the checksums are provided by the autor:
+source=("http://gerbilsoft.soniccenter.org/gc-tools/$pkgname/v$pkgver/$pkgname-$pkgver.tar.gz"{,.asc})
 sha256sums=('6c9897553bae6794c27aab3d1978c50e2d38df6f54e80f06e587f339e6bb66a9'
-            '43898f11b2d9012d97685c7637d4a337ff3852c9e4ee9d1c9df12cae5a69543b')
+            'SKIP')
+validpgpkeys=('C91368749D79DFF18E3A492137D5937255358F32') # David Korth
 
 prepare() {
   # reset build folder