This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-clipbucket-13.0-wheezy-amd64.iso.sig gpg: Signature made Tue Oct 15 14:49:04 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 10ac69b0ffcc3002afa00ca75c8a2f46030ec317 * md5sum 7ce4a9e1325550594c6a64431e085902 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXVXWAAoJEIXCXpWhbrlNgN4H/Rb9sYmZ1AwplB8ay1PLUWqs ui9n/qk51C8cSycQ/Aw8G1pQBoDxt924aRDH6T8b1hk6Xd9hyA8fGm36WthYtGJP 13LYHRArwucy4wQn5762MA+SDyF38Xi0kS7nc9z3vyYC4+wYlq0t6VQQDHcxXUyp 16JxQjDCxlia6yOY4pejvEGK4x1XkES5wnsmptjv/OR5yjc0m7h9s663M+GiHnWp 9rDUfUqtuZKlo2AIN9wSTG4XLuWSlpnp5iRqE9INvsBfCBA5XzgGBf+JwMrIrN7v jZLGsCuzdYNYXeW/TjiWb2d1QmyA74mpt/z/MDfmZzQHvu2exizJGA58LZX/mIQ= =FBc4 -----END PGP SIGNATURE-----