Okay, thanks for pointing me in the right direction.

Now I Can answer by myself: 6 keys are whitelisted: https://github.com/bitcoin/bitcoin/blob/master/contrib/verify-commits/trusted-keys