This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-orangehrm_13.0-1_amd64.tar.gz.sig gpg: Signature made Wed Oct 16 09:34:58 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 1b7d757e8aad1eeb76ebe53749c6b5697188ee5f * md5sum f097a386cc07f19d0642bf51e78fa61b You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXl28AAoJEIXCXpWhbrlNnp0IAItNYsz6riJhaSMFwuz+gnEb wymDoSpZ6FS8ULvT0fRJ/nwjFWuAsndOhIiaYPqnc4N97N3HstVns0eG041mUKWf OwDG+J0MLGl3Q1anh7qVLOqS4E0R8VF6R8JgfXarZ87dcrynZexlcwtES9GUjZOK oHXiek0phDRIHMLoXMKJ3lDFg7t2pBcshkZg0gGlGG3nXhU5JiqYNirMCdKmT0fv 3hmnXJbH88GaS4d9AkExmxNOEwR79O8FZy7FOcXHQEwSb1W9IhunpSZc7cZK7Bc/ b3sg7DBOhsabHsnlJmFLGiRnZDn/X4sliZPlhW1YWyqG87qzFpp62elZSblTxCc= =llBd -----END PGP SIGNATURE-----