This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-mediawiki_12.1-1_amd64.tar.gz.sig gpg: Signature made Tue Jun 4 14:13:12 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum c692d2daf4e6674e19f16d5f179f4646765c2e4b * md5sum a78fb9f1f0136befa81ea48255d99754 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrfXyAAoJEIXCXpWhbrlNJz8IALN52Ecgk1C2xO4Ioa1TlDAe rmU5+6G25sOCT8WZMEYHjDGpeSw3r/RaxfHE1aO5wHC8Q3f471fhZ4etXX1h+/i6 Z9TpO5KKwT0cF8EfkzFj9hnEA/aVIMuYYMfTjIPB1slU0vx9IT5RzkuldIWF+5tx gySMuB3TrhOEOn1YvCO9q/ILbMZyBHoW0sbJoaSRhZrplMnmlI+PF8tin3mAISKv ZGRD2i+d3cXW6XHBFcS/gpDfL9wwe0DE057Vwtex4L6pSEPoSjFQHPWJZOSxSFf8 p+W1EdfSSBVxQC9bdmmKyogNJpqz0vgwMGdVoojSL2fQPzjCJLPV3qHGBCo6bxc= =G2FA -----END PGP SIGNATURE-----