Each member of Project Colo has an OpenPGP key for communicating securely. A keyring of public keys can be downloaded, though you should check that you can trust a key before using it.
The current web of trust is graphed below (any isolated keys are not shown), the graph was produced using sig2dot:
