I always make a habit of checking GPG signatures of downloads (especially for crypto clients), but there are no GPG signatures for the clamclient downloads.

After what happened with Linux Mint, I think this is a good habit to maintain.