Debian uses PGP signing pretty extensively, and maintain a keyserver (and separate search interface I used for this) for their keys: https://keyring.debian.org/