A tool that verifies the correctness of a metadata file is the file is fetched from somewhere the process of signature verification is expected.