Here is the first beta version of a brand new security tool:
'checkroot' is the first tool to retrieve fingerprint/gpg-pubkey updates
online and therefore allows a trusted verification of your root file
system roughly based on rpm --verify. Not even debsums can do that.