I just saw that the dirs in testing on http://download.fedora.redhat.com/pub/fedora/linux/updates/testing/$release/ are renamed from $basearch.newkey to $basearch.newkey.newkey. But the other mirrors still have $basearch.newkey. Is this connected with the new signing key or is just a server problem?