This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-etherpad-12.0-squeeze-x86-ovf.zip.sig gpg: Signature made Tue Aug 21 11:42:16 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 2da0eacf8ea5b8fc314f9978273b2fc16e672069 * md5sum a8a9b61d19df8c4acc456362da14e93d You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM3QLAAoJEIXCXpWhbrlNHX0H/j8Eq7CbtYC6Xb7CPx5a/xj5 BE2Q11nLeJWYj9HIcOJZ9F53NSOLPgs1/L0cQMgxLI1rClu8qaX60HBvOhekNB3w SRIxDx8M086zT/dSSQurS5hF9mf4nUgR+6+5FavZ2U4bQ4l5+BuodF9uknx936Me vGJEbecMZSftyf6B8DPbJ9Cv5pBgJluZ8cjV4WSNW/TUY7PGPS3N3WTt/D9TFx72 VpsQTlrgZTwXZzOj1dUXVb07wK71V971UFb4kFw8vFBdVx/NS7MdQ7tVPAExAuUS EE3UHi7sN/lGwv600A6UAz/wcekdZWJlo2az9/8Z9G/LJw9ckim26wMT74Xw+zo= =YAFy -----END PGP SIGNATURE-----