Re: [tor-relays] Debian is not allowing tor to update despite it being listed as a trusted respritory

Seems like your machine doesn't recognize the certificate for https://deb.torproject.org, which is a separate issue from eg. the GPG key not matching which would make it untrusted.

Seems something in the certificate chain from Let's Encrypt has expired, because the cert itself is still valid.