We sign all the releases with a GPG key.The signatures are uploaded to both the GitHub releases page and the PyPI project and end with a suffix .asc.Please find the public keys here.The keys are named in the format -.gpg or -current.gpg if the key is currently being used for new releases.