diff --git a/patches/openwrt/0004-HACK-opkg-do-not-preserve-opkg-keys-on-upgrades-by-default.patch b/patches/openwrt/0004-HACK-opkg-do-not-preserve-opkg-keys-on-upgrades-by-default.patch
new file mode 100644
index 0000000000000000000000000000000000000000..5103729561d2f8fdbc947ec9e2d1f1c51927bd12
--- /dev/null
+++ b/patches/openwrt/0004-HACK-opkg-do-not-preserve-opkg-keys-on-upgrades-by-default.patch
@@ -0,0 +1,20 @@
+From: Matthias Schiffer <mschiffer@universe-factory.net>
+Date: Sun, 30 Mar 2025 13:16:02 +0200
+Subject: HACK: opkg: do not preserve opkg keys on upgrades by default
+
+Custom keys can still be preserved by listing them in sysupgrade.conf.
+
+Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
+
+diff --git a/package/system/opkg/Makefile b/package/system/opkg/Makefile
+index e7c45e3523135a6cc35385a81c65cf2831b842bb..fc5ec6a7ed1eb559a478b00b03102fbccd543c57 100644
+--- a/package/system/opkg/Makefile
++++ b/package/system/opkg/Makefile
+@@ -56,7 +56,6 @@ endef
+ 
+ define Package/opkg/conffiles
+ /etc/opkg.conf
+-/etc/opkg/keys/
+ /etc/opkg/customfeeds.conf
+ endef
+ 
diff --git a/patches/openwrt/0004-kernel-bridge-Implement-MLD-Querier-wake-up-calls-Android-bug-workaround.patch b/patches/openwrt/0005-kernel-bridge-Implement-MLD-Querier-wake-up-calls-Android-bug-workaround.patch
similarity index 100%
rename from patches/openwrt/0004-kernel-bridge-Implement-MLD-Querier-wake-up-calls-Android-bug-workaround.patch
rename to patches/openwrt/0005-kernel-bridge-Implement-MLD-Querier-wake-up-calls-Android-bug-workaround.patch
diff --git a/patches/openwrt/0005-mac80211-silence-warning-for-missing-rate-information.patch b/patches/openwrt/0006-mac80211-silence-warning-for-missing-rate-information.patch
similarity index 100%
rename from patches/openwrt/0005-mac80211-silence-warning-for-missing-rate-information.patch
rename to patches/openwrt/0006-mac80211-silence-warning-for-missing-rate-information.patch
diff --git a/patches/openwrt/0006-net-mac80211-override-incompatible-basic-rates-for-mesh.patch b/patches/openwrt/0007-net-mac80211-override-incompatible-basic-rates-for-mesh.patch
similarity index 100%
rename from patches/openwrt/0006-net-mac80211-override-incompatible-basic-rates-for-mesh.patch
rename to patches/openwrt/0007-net-mac80211-override-incompatible-basic-rates-for-mesh.patch
diff --git a/patches/openwrt/0007-net-mac80211-force-backwards-compatible-basic-rates.patch b/patches/openwrt/0008-net-mac80211-force-backwards-compatible-basic-rates.patch
similarity index 100%
rename from patches/openwrt/0007-net-mac80211-force-backwards-compatible-basic-rates.patch
rename to patches/openwrt/0008-net-mac80211-force-backwards-compatible-basic-rates.patch
diff --git a/patches/openwrt/0008-mt76-import-MT7915-recovery-fixes.patch b/patches/openwrt/0009-mt76-import-MT7915-recovery-fixes.patch
similarity index 100%
rename from patches/openwrt/0008-mt76-import-MT7915-recovery-fixes.patch
rename to patches/openwrt/0009-mt76-import-MT7915-recovery-fixes.patch