The signatures do expire (which is an annoyance when working with snapshot.debian.org).