All Go modules are distributed through proxy.go.cypherpunks.ru GOPROXY server.
Each module's .zip file has corresponding .ziphash and .ziphash.sig signature.
go.cypherpunks.ru ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMTNNc4SiGFyPeTDbhzXKmq/JSX2hFqpjxPacKuGsZ2u
http://www.stargrave.org/Trust-anchor.html