(Obviously) the tarball wasn't updated in place, and the .sig did check out, but I forgot to commit it because I'm a bit of an idiot. * gnu/packages/tls.scm (p11-kit)[source]: Update hash.