If I've downloaded something from a first party website (e.g. the main gnupg project website) OR a highly trusted third party (like, for example, a well known Linux distro site like debian, ubuntu, ...