[jacques_chester]

Yes, but rarely used -- it's clunky. When I scraped the top 10k gems, < 1% had valid and up-to-date signatures.

[jupp0r]

Notably, signatures are not checked by bundler when installing gems.