1Copy the whole message
Select everything from the BEGIN PGP SIGNED MESSAGE line to the END PGP SIGNATURE line.
2Run the check
Use Decrypt/Verify on the clipboard in Kleopatra, or save it to a file and run gpg --verify.
3Read the result
You want a good signature from the fingerprint you confirmed. Expired or unknown keys mean you should stop.
4Use only signed content
Take the we the north market url from inside the signed block. Text outside it was not covered by the signature.
Lesson summary
A WeTheNorth market URL counts as confirmed only when it sits inside a block with a good signature from the known key.
Looking for the current address? See the WeTheNorth link status.