The problem is that security-servers are not in sync and Release / Release.gpg are fetched from different servers.
128.31.0.36 lists dates of 14:00 sth. 212.211.132.(32|250) list 19:00 sth. Temp fix: Insert into /etc/hosts 212.211.132.32 security.debian.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
