For installation instructions, please see the wiki. You can download the older versions from the directory listing.

Signatures can be verified using gpg. To do so, download the maintainer’s key:

$ gpg --receive-keys F9E70878C2FB389AEC2BA34CA3654DF5AD9F641D

Then use the --verify option to verify the signature:

$ gpg --verify /path/to/signature.sig