This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-mibew-12.0-squeeze-x86-openstack.tar.gz.sig gpg: Signature made Tue Aug 21 15:58:12 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 7d312a3fa356ee3f1a90d87f5823506c816ccf3a * md5sum 54fd265b20dbd9ede5452f7b5afc7943 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM7AJAAoJEIXCXpWhbrlN5c0IALR5wfCC3HbTUVLbA7Q9CSdP AJDwh9Ukk1d8OGsRe5MvzN/EDYP8CSxcmJtz9b6iZQQ+fuOQPbJcxrQ+R5c/dyTs okfKvdxiwip3Pvtluk/YhKgUSELnIHFDbFN0xQjwtnzk6v16q7oEc1BTF2F6HJFv hlz56ML5S/GDKJ0SQKlSdCkQ2rPo2IeHe4whC7yKooORo2diQVnJ5BlPH4Xzuzjd T7gbhjq3S5pMZ+kqmfqa3nh9DCWgEnU23mzijSzMD8wsFFqnZgK6/aAxCCMtIOFd oIdJ/xV2Fn/ZfU58y3HEa+T0rcQ53GUjZmkvt2GqknphdCD3uWRrwSMDxuYiBiw= =XLup -----END PGP SIGNATURE-----