At the bottom of pagure pages, there's a link to the SSH Hostkey/Fingerprint. On src.fedoraproject.org, that page is here. But both the RSA Pubkey and RSA Fingerprint are the same as the pagure.io keys.

The RSA Sha256 differs between the two hosts, but one cannot actually connect to s.fp.o via SSH. If you connect to pkgs.fedoraproject.org (as that is what every repo says to use), then the fingerprint is SHA256:Q12OTyTeOHWlS54dTzy2BNu7wB8UKNf18+7WHIDsORc, which doesn't match.