IPFS, with a chain of objects, signed with one of a set of whitelisted keys. You'd need a bit of logic on each node to pull the latest objects (maybe using IPNS).
IPFS looks quite interesting. I will study it more to see whether it would play an important part in solving my problem. It appears there isn't an exact open source solution out there.