Thanks for your and the other responses!
I know how PGP and verifying signatures works. That's not my problem. My problem is that the necessary keys are not posted on the download site and I have / had no idea where to find them.
Now digging around a bit under the link you provided, I see...