Using Server 39 iso torrent from:
https://torrent.fedoraproject.org/
Fedora-Server-dvd-x86_64-39.torrent, ie:
https://torrent.fedoraproject.org/torrents/Fedora-Server-dvd-x86_64-39.torrent

The included and downloaded as torrent SHA256 sums is:
Fedora-Server-39-1.5-x86_64-CHECKSUM
, 343 bytes.
Using the website verify method:
https://fedoraproject.org/server/download

results in: $ gpgv --keyring ./fedora.gpg *-CHECKSUM
gpgv: no valid OpenPGP data found.
gpgv: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.

While the SHA256 checksums match the signed checksum file at:
https://dl.fedoraproject.org/pub/fedora/linux/releases/39/Server/x86_64/iso/Fedora-Server-39-1.5-x86_64-CHECKSUM
there is no signing information on the copy within the torrent and hence can't be verified using the web site Verify instructions.

I haven't checked any other torrents, possibly a wider problem. If the .torrent is built automatically, perhaps the order needs to be looked at or a pre-task to ensure the file is signed (and matches the current version Fedora signing info), before building the .torrent.