This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-phreedom-12.1-squeeze-amd64-vmdk.zip.sig gpg: Signature made Tue Jun 4 15:13:37 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 4e10da8e2cf3dce21b23fc030d91fb980125df24 * md5sum 7bfd87ad7c996d940405fb808e3ac609 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrgQXAAoJEIXCXpWhbrlN700IAMmhzPpu6YN8rtCaNIq2Qm3s QhzX14JegzhZMrJ2NNfOK3QKMWhVXeJCXeKMygWSDwW+wivV5fhRwpDmzFXy+h9a 4rX0ibJRAVGXtIkXmVkz7ko/UJAxxeXfAvgcb1bV38c4SOg09ZR9qG3Q9Gz3rIr2 o9gYIhhFpyCpbOV4D0lTLfQ62yf9WJFbS5zXFOnS5E3mG6RjxSdAo9mE8Y/pPACo dOlZVA3xne8oz3pOjuwmXuSaI2S20pMIKRP+1qeqgov+iMcR02lzRQWR7/svnNqr e47yrhKmshS+bPDrHt6B9yOm4H+Nkt/ihwjuuS+YXa7MV97EuXpGLcS9CiYGBCk= =Yvv7 -----END PGP SIGNATURE-----