{{ $filename := .Inner }}
The PGP signatures can be verified using PGP or GPG. First download the KEYS as well as the asc signature file for the relevant distribution. Then verify the signatures using:
$ pgpk -a KEYS $ gpgv {{ $filename }}.asc
$ pgp -ka KEYS $ gpg {{ $filename }}.asc {{ $filename }}
$ gpg --import KEYS $ gpg --verify {{ $filename }}.asc {{ $filename }}
Alternatively, you can verify the checksums of the files (see the How to verify downloaded files page).