Working with PGP Signatures
central.sonatype.org