The tor projects signing key has been attacked with poisoning attacks. I have gotten rid of those trash certificates and present to you the original public key. Don't take my word for it, go and verify it before verifying downloaded bundle.

This keyfile has been signed by me and I guarantee its integrity.

zip packet has:
Tor Browser public key.asc //The cleaned public key
Tor Browser public key.asc.gpg //My own signature for that public key.

My key can be found from keyservers with the fingerprint:
511E 36E5 EF2E 07ED F62C  3E21 2AF4 D2DD F77F F557

Browse safely