There are multiple repositories. In general, each distribution has several that complement each other. The package management system also differs from distro to distro. In general, however, packages in the most impactful repos are cryptographically signed, and the installation tools verify these signatures. To do this, you need to install the corresponding public keys. Read the manual of your installation tool to see how to do this.