We are now signing the RPMs, you can find the GPG key at http://www.vrdc.cornell.edu/extras/virtualrdc-pub-key.gpg
The key can be incorporated into your RPM database by
rpm --import virtualrdc-pub-key.gpg
and the validity of an RPM can be checked prior to installation with
rpm --checksig {RPM file}
Any feedback you have is appreciated.