Recent versions of iproute2 in the download directory are now signed.

Using GnuPG, verifying a signature should look like this:

  % gpg --verify iproute.tar.gz.sign iproute2.tar.gz
  gpg: Signature made Fri 30 Sep 2005 02:38:02 PM PDT using DSA key ID 36C545BF
  gpg: Good signature from "Iproute2 Verification Key <iproute2@developer.osdl.org>"

Unless you have taken explicit steps to build a trust path to the Iproute2 verification key, you should expect to see a warning message akin to:

  Could not find a valid trust path to the key.  Let's see whether we
  can assign some missing owner trust values.
  
  No path leading to one of our keys found.
  
  gpg: WARNING: This key is not certified with a trusted signature!
  gpg:          There is no indication that the signature belongs to the owner.

after gpg has verified the signature. You should not be alarmed by this warning.

Before you can do this, you must gpg --import the key below. This key is also available from most common PGP key servers, such as http://wwwkeys.pgp.net ( http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x36C545BF). To import it from the keyserver using GnuPG, do:

  gpg --keyserver wwwkeys.pgp.net --recv-keys 0x36C545BF

The current Iproute2 OpenPGP key is:

pub   1024D/36C545BF 2005-09-21
uid                  Iproute2 Verification Key <iproute2@developer.osdl.org>
sub   2048g/16068D7B 2005-09-21

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.1 (GNU/Linux)
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=Yo+i
-----END PGP PUBLIC KEY BLOCK-----