This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-owncloud-12.0-squeeze-x86-ovf.zip.sig gpg: Signature made Tue Aug 21 12:12:57 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 3bfd5e479c6cffc30c57555a28baa9ac5ca6024d * md5sum 918955e0fe267e0fbe5f63a394b01e53 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM3s7AAoJEIXCXpWhbrlNtNkIANj/U0QpV6jpHbVqxlUB03V/ rxYcaRVHmNPkoSCSvPcRu4qakbxVt6Xpx0hnjxywnfkn24srDTX5tQesDHhveVUI d/u6QoHlvD0b3wkHjXiHBRJXYoGBtwD1MNAvHSUTwW94Msex79g1cKhQzr0YTU7G jfU4Gg4HE34XV26L26BQ/ISIQEOaUwrxXzhI5J7hh1jkZfCLiwn5vXP+WhyGx0+b DvrNJ/ToPwjV9NnB7LtYHqTTQKbJ1z10JVBX5y1EGuEL0WWiUNeWKHoGPjgc0wTD b+moXXKYvTy7BN2F9VzoOg7eEmdAgj4yU9eHs4Kdg1FTYU5066iUPUC6t7l+s00= =Tsnv -----END PGP SIGNATURE-----