This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-drupal7-13.0-wheezy-amd64-openstack.tar.gz.sig gpg: Signature made Wed Oct 16 08:28:09 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 434b873dab87d40f42e76d5909db92f63d8013cc * md5sum 62aac7a2ac8cdd1c77bfc43683ecb8cd You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXk4PAAoJEIXCXpWhbrlNN/wIANhoUOLaPOT4O67JEIfHmH0B shAZnWXDgN8GTBzERoNkD3P1wcezPi9NpmuWCevT83kihgFhk7G9gRSj+hyhiUYX B6vkRQ1Ldw7eL9PzE/0o7LsPgzNPr7V+O0H8F2gC6TF+U+w2GUrb08emlOXFMAJJ ClI0vn/eoKnlQ/oiywqYh2fl6Dg/KQjaY/kRw7Cy+itXLXh/5GihAs+1lA0h5wTq 1qU8QpVSwMBDdU15bnkKdkcgjO089TIr8oImhQprfTbFXwk4srBi9bhA935C5RD2 dblgxAxEFgBBXhHE1p4dlrNO7bOivvALo8GsBDyawKpa9aCg2KvblV0sPFNPiAA= =zQ4g -----END PGP SIGNATURE-----