> I downloaded emacs distribution for windows 64-bit binaries
> (emacs-26.3-x86_64.zip) and the associated signature file
> (emacs-26.3-x86_64.zip.sig) from the location
> http://ftp.gnu.org/gnu/emacs/windows/emacs-26/ >
> My attempt to verify the signature says that the signing certificate has
> expired a few months ago.
> Is it still safe to use this download?
Yes. I am considering what to do about the expired key.