A tool to manipulate with keyrings with keys used by upstream developers for signing of their project tarballs. Keys can be verified during building process.

It includes RPM macros for build-time offline verification of upstream tarballs during build.