This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-typo3-13.0-wheezy-amd64-vmdk.zip.sig gpg: Signature made Wed Oct 16 10:35:25 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum d9bb30829ec96b5b6dc510c553d122ac111f7809 * md5sum 5672939bc7c4b541a2e293d22785f0a1 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXmvhAAoJEIXCXpWhbrlNrb0IANGXQr7sMw8m/l056IoEv3uP WT/PJtU8yzBMAUITr/TXBMmbIfyVDPUZQYGwquMzM+czcjR1pU/iOszzwl4J+Xsh ttVZimxsdWCRgNULcm9VuUT98+DHtyMDzOtNdEvOKugdRaGGsV4uo+V/opIJt2fP oQIiyDtTVq2purx6AVQA6s5FsSTErwsK5ccEpAPMbItMZT02qXnV695BuO8DpuOS 35HyeZyw/KkvGXVTPaSyCKfkeBM+7M4x8fgtvMCAiK9k7W2xMps6n1qMsyLUGZFt srW3r/QqMcIdAsv+4sKC34S7U6/puoPuomkt1G5LoJDrauSuOxm15Q7MEl4Xh4Q= =DXAB -----END PGP SIGNATURE-----