Download the signing key, add it to your device with opkg-key add public.key, and then select the version that matches your device (check /etc/openwrt_release or the LuCI status page):
opkg-key add public.key
/etc/openwrt_release