diff --git a/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/Manifest b/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/Manifest
new file mode 100644
index 0000000000000..453653e758e1e
--- /dev/null
+++ b/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/Manifest
@@ -0,0 +1 @@
+DIST openpgp-keys-apache-tomcat-jakartaee-migration-20210205-KEYS.asc 28613 BLAKE2B a8e4795f4808e12bb0bd165fbb6268a28881bb25d4055d6f98bc43605b7a50a86f27ca5f2b98fe5bcaf2df21a2e762b6af8741ed5f68e22b0626b7e5808353b4 SHA512 228c9d417e6fca660151263f06e283b651ee838deb340bfde291e6c851b3dbb843c0e111db9816736efc7c050b36c129238e6bc4acd4d1df1248c33c5bd33b9b
diff --git a/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/metadata.xml b/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/metadata.xml
new file mode 100644
index 0000000000000..6ef2d50cf07ee
--- /dev/null
+++ b/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/metadata.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+  <maintainer type="project">
+    <email>java@gentoo.org</email>
+    <name>Java</name>
+  </maintainer>
+</pkgmetadata>
diff --git a/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/openpgp-keys-apache-tomcat-jakartaee-migration-20210205.ebuild b/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/openpgp-keys-apache-tomcat-jakartaee-migration-20210205.ebuild
new file mode 100644
index 0000000000000..e4c917c6a0c5d
--- /dev/null
+++ b/sec-keys/openpgp-keys-apache-tomcat-jakartaee-migration/openpgp-keys-apache-tomcat-jakartaee-migration-20210205.ebuild
@@ -0,0 +1,19 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DESCRIPTION="OpenPGP keys used by jakartaee-migration"
+HOMEPAGE="https://tomcat.apache.org/download-native.cgi"
+SRC_URI="https://downloads.apache.org/tomcat/jakartaee-migration/KEYS -> ${P}-KEYS.asc"
+S="${WORKDIR}"
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~amd64 ~arm64"
+
+src_install() {
+	local files=( ${A} )
+	insinto /usr/share/openpgp-keys
+	newins - tomcat-jakartaee-migration.apache.org.asc < <(cat "${files[@]/#/${DISTDIR}/}" || die)
+}