JFrog plugin to verify deploying artifacts signatures. It supports both JAR and RPM (PGP) verification - View it on GitHub