This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-mediawiki_12.0-1_i386.tar.gz.sig gpg: Signature made Tue Aug 21 14:04:00 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 36e13b6ed87b01f9f0e7be4b71e765ea13e5e1ea * md5sum 15bb7223b7a2909df81acbe16c41d434 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM5VGAAoJEIXCXpWhbrlNSmIH/AsNL5D7wQa7d1b1z33IXX2I P+0kvxrY9CJB4qVBtc1MyqBWgrmIPudBU0q0jaVJHi9PpR+yAfT8Ji2CitxpVHNT hfTCA5XUqwnZEXhqn1u7L+Mlqd44s8+/t0VHKosKEaCZVLEcSuUDyT4Nuz2Tymvb gjBoRw0hRki9G1EkEkRcGA1+IF+N0FZn4XpYOHdP9wIC1LIT/Wz8ytGNLEx03Iow xN5SbC0UXGA8ADF+WWM/NysOJXwfOxzTXQSTGvZUN0JtpS7GWpyaeh1DMj+NBey5 tV8b9sNlY6yUX5dIbsTp+4ghjj8LFPjEaqr+I/zMGoXUPhpCiLsO52vEPh4vWG0= =uzK+ -----END PGP SIGNATURE-----