Changelog can be found here.
Tarballs are signed using key ID 6C222EA6B2BD216AA406516AC868F0B6DE38409D which can be obtained from a keyserver such as keyserver.ubuntu.com.
Import the public key with:
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 6C222EA6B2BD216AA406516AC868F0B6DE38409DIn order to verify the tarball with the given signature, do:
gpg --verify <tarball sig file> <associated tarball>