This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-sahana-eden-13.0rc3-wheezy-amd64.iso.sig gpg: Signature made Fri Sep 13 09:12:25 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum f5bde97b7ff8d64d40aff84023c11deea50aa966 * md5sum 895c435e748b38a6b62a74a6592ca7bc You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSMtbtAAoJEIXCXpWhbrlNdbIH/14ergeCOERwwFOIJln4ORMn S7nQOLaGpcaw5+b1zlWIcIAnMoGEQsI5oMXMmlmeK8jGCo0K7z6nxrn3Z3q1Paz7 FkVGoqdZkoVPAecMqdW3sh0HTsKZcGSajUXWiv2XFrS9qrjJgRQ7UVMRPnuorHTG ciNpUK1ijt8KtybmIKH/yieh95l3tHUFfRKHQdmT62lku3HcJX9RkeuPz8S+cLsa NcW8JN9EEYdbPv00xoL7fZ535Pf7a88AmwT1xcyiyZMO/8eCON0rVMuTh+dLPZ/5 THedx8T1kKn2fWOVul8qVoe72GTc1NtmMaeKw2NjjPI7X8yDQCwl63CkO7s6O9o= =HzFE -----END PGP SIGNATURE-----