All Go modules are distributed through proxy.go.stargrave.org GOPROXY server.
Each module's .zip file has corresponding .ziphash and .ziphash.sig signature.
go.stargrave.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcoxt4ehLRbzgT22urZ/7NokwLIKbQvqTkjn6jQY5C1
http://www.stargrave.org/TrustAnchor.html