This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-phreedom_12.1-1_amd64.tar.gz.sig gpg: Signature made Tue Jun 4 15:22:03 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 46c3720cd1a6d1cf8f3e0ba8d6d03f2e2b20a24a * md5sum 7d213171cf25bb6d97ea56ba5a3e2d3b You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrgYUAAoJEIXCXpWhbrlNF+QIANSvjqvJ5I6FxL92fp+/baYe +dz0DyZGlnR4dRFOT+9xbjm+GKxQ3peqfPXMfg4np7uFg5BCeuGB5Arckc90ol2k 63ACOT2n8EPpsL1y7FilkRuTC88J3RVQXdX1IHvwG1E6uNbUS9+O9vlslg4JDp+2 XowLUslgLMGviF6Wsb9SQhU7T4wDTG+UIk9/mlY5PBh1UfrMBr9Kt0ktCdW3croT ZYUXXVlJt9xus0v0Hqhp/TuO7hCdeP3YHjWHbpoReIGYQZCtXfnVebMGDsqt9Plp HPbN4Dp+3JMgmuMclSmV7LXhGS9sd5oi2oVCL20wM6hPIOqFtI+zFRwsUzcCOiw= =J8aB -----END PGP SIGNATURE-----