Kexi/Releases/Signatures
Signatures can be verified using gpg --verify file.sig file. User-ID: Jarosław Staniek <staniek@kde.org>, Key-ID: 1B6524DB, Fingerprint: 4866 BAF7 13B4 6567 7A40 5964 3C7C 0E20 1B65 24DB, GPG key: here.
To verify multiple signatures for *.xz files in a given directory, type (bash shell) :
for f in $(ls -1 *.xz) ; do gpg --verify $f.sig $f ; done && echo "All OK"
"All OK" will be printed on success.