This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-owncloud-13.0-wheezy-i386-openstack.tar.gz.sig gpg: Signature made Tue Oct 15 17:49:36 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 99fa754f436ce591e3ea4ffbb80777ac941eb48c * md5sum 10e81eda80c5c544cde201e898d0d249 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXYAmAAoJEIXCXpWhbrlN4CYH+gO/vgQ4nJk1IeBNwtguwKC3 e/zWPmYnwh+GEVCWeXAj+stwWUZudhvZa8kmn4lxSTQDr7H9lrzE+zmVt5LHJKK5 wI9trpQZ7hizXTP24nBBHiair6h1gF2edrI4Q9b/zI4ii8QUjosCS8FhZbgSlR/O V9Ugb9/9AvB4k0zi+QUgqjt9Rfe3cOec2Hrs+JfWBZGUR9ccSlKMRcKUMrnUV+mb GvHCujiVDaxXc2i4NYS/7CqC2ShJTU2aLnbHhmbRiZJNpjKoJK/i5V7TGDgnJ3yP 5qlhxTkI33V+sIRO0sCcwoztdjl/ntApq1SysuopMHraLroeNpOoGpwYo6yDiIQ= =Uie3 -----END PGP SIGNATURE-----