you can follow these procedures and the KEYS file to verify the download files
GitHub: https://github.com/apache/dubbo
Release Notes: https://github.com/apache/dubbo/releases
GitHub: https://github.com/apache/incubator-dubbo-spring-boot-project
Release Notes: https://github.com/apache/incubator-dubbo-spring-boot-project/releases
GitHub: https://github.com/apache/incubator-dubbo-admin
Release Notes: https://github.com/apache/incubator-dubbo-admin/releases