This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-mediawiki_13.0-1_i386.ova.sig gpg: Signature made Tue Oct 15 16:54:25 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 51b634418734cddd4904389540e682a7e44e51ca * md5sum e5745fa58e240a8f59d353b7d4269822 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXXM5AAoJEIXCXpWhbrlN0B8IAJW8cU5GVYyhJF+X0bZN4qt9 1SpTSQ34tBEan5RW30BCzDgi9nGhLg4278er/BEUbsK+eSbwyQ6zeVYrqXwPjz12 qWhV+J5bUe4g9idqHGnolHj2XkoEDzpAc8UCZw19qga3zCT7hclU6WtBmpyXOs25 MQUpBM4FUvKh+kBdvjuAyPAKbvI7JMrC+jdGeLYeeZrYVCgDPRCnmJFSfXIIVwkI rLncI0oKhVnUWvv1JCRSzsuN8rr6EBDPh9+1nJlaBgQjTMzBWKLcrA5+oaAUQzXR vIO71/UCz0qzjc1W8aZ8dmugBxgdSr98lU3549Xod0PC9EPEDTZ4GL5WqMj3wJA= =9JUz -----END PGP SIGNATURE-----