Conectiva users will find RPMs maintained by Conectiva here
Import this key on your system by doing:
gpg --import key-file
Later, you will be able to validate the package (make sure it was not modified since I release it) by doing:
rpm -Kv package.rpm
You can find GNU Privacy guard at http://www.gnupg.org