Comment by mattseh

IPFS, with a chain of objects, signed with one of a set of whitelisted keys. You'd need a bit of logic on each node to pull the latest objects (maybe using IPNS).