This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-symfony-12.1-squeeze-amd64-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 16:31:43 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8d066fcb13032b832aac5a00ff708ba3b169c2cd * md5sum 02d0d117654663f2b3eed5cb980715ab You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrhZlAAoJEIXCXpWhbrlNy/4H/R5MLhk+ombhLCWsH345f+XV q1/PuJv2DRBItOTy2lDgFLL6xdXMdyBiWsLkeM6u4D/QYTraxsqielV+6yv8UWst 0BoCSA7OO/NfZ/xneTr6+sKPmpiaPuvBXZMiO2t2DoP4dyOjrdfggHps0zSPGFGO x8i2HQ0bAU0WG9hjo7MuZawVE7SANCxpn0RtROy+/G33rK8LFqmYVxb/jod2FkRj PvzxFyCBVach3StGTpgZiuI6dqyECG6D337cArp9ra18SHotPX+UxFdLIJ5F3T9V 5JgjJbzt5chJsUl6x0XCa/z0UaHa8TBAPuWtWzqgw/cxhiOkWOs1Qzk0Cjq1Xb0= =Gf/3 -----END PGP SIGNATURE-----