http://wikipewt4n75trifcse2ggaieot27svognl7idu6xmmqn37kf64rvsyd.onion/index.php/Verifying_PGP_signatures
On Windows, the command is placed in the %SystemDrive%\Progra~1\GNU\GnuPG\pub directory after it is installed. Most Tor binary executable packages are signed by Erinn Clark and can be verified using her PGP public key .