Quicklisp still doesn't support HTTPS, which is apparently also necessary to do signature check.
Use HTTPS instead of HTTP - https://github.com/quicklisp/quicklisp-client/issues/167