sigcheck - remember where a signature was seen To check a signature, this program displays you a list of past items with the same signature (and maybe your notes about it, too). ./sigcheck.py patch-2.6.0-test8.gz.sign This will create ~/.sigcheck, where you could add a description to the newly added fingerprint. You need gpg installed. If you want it to autofetch new keys, add something like this to ~/.gnupg/options: keyserver wwwkeys.pgp.net keyserver-options auto-key-retrieve This wrapper script helps you to verify software comes from the same source as last time. You cannot be sure nobody managed to exchange all signatures unless you verify a fingerprint yourself. Mail signatures are not yet supported very well. 2004-2005 Martin Renold, public domain, no warranty etc. Latest source : svn checkout svn://log2.ch/code/sigcheck Signed releases: http://log2.ch/martin/sigcheck