This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-fileserver-13.0rc3-wheezy-amd64.iso.sig gpg: Signature made Fri Sep 13 08:00:34 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum c45064a0ac1bf6970f0612f0834bb798a4b8dc86 * md5sum 25b41676677ec4d54f425a113b55af9a You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSMsYbAAoJEIXCXpWhbrlNOlAH/0NJ7mSICE5KjNczZrJwfhRI XbUe0Mko+ltWoZUD3umvgZCYafytxPgt3Wgv1uV7K7XXMBc+xTv6eMteTWXbEI3r UaBzesx5QIIY7PpryZnS5ZHpJQdU0e0JQwVey//emiKLp6kx3XqT7m2M5nHoMRh4 xbOKbYV2KyRUsLrK/Sa9EiiWrlFPX/oZmnulB7i5fHnHikn2h99n93frn1L1XNi+ WrWrUpngKmnCmLGymzlAj4WrRNnJDjCqqDYiDxF6XN6i7hnS4iHQfK8YU7TpwEf/ YTjNNq0aBLyarzX7GHAEyG8q6HuTPDccY+SVO2f/bE29xmblLqOuDSNkWh/hMcU= =yNzY -----END PGP SIGNATURE-----