This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-zurmo-12.0-squeeze-x86-xen.tar.bz2.sig gpg: Signature made Tue Aug 21 17:34:33 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 3512019e53bbadf00e85dd1628f69646210fe7cb * md5sum deffe77e993009f4b0bd73d9d16d419a You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM8agAAoJEIXCXpWhbrlNKewH/0U3a4GbPd7u0psD+OnQNxNf xBxXa/B5c8RL1s54h51eed9Zg9I5AZpHbSjp4r0YVZpr5t8komnqxVe18o3SoUJp Zxbp4nNW3J5S+umgyH3VteOOEOPd4wSaTml0Dzb9fQli00+7ThoPZrkUUPx1jurk EURaMVJGAoNKKVe7dpBHNMcT83EOFf9rK03srnI0b6a955gL1IScapcz40sTsy1+ kX9tS0w817nxvpgmW4z/tAk7JLVJvN9xuwi+bzXulyb2E/oyHcoYvmAzE5f1y8sj 6jlGD9QEqoQbGSUjSrnkur/nldGTB7d4Fs8YCB787ZlaRR2XHRvXKphK63m/lkw= =E/c6 -----END PGP SIGNATURE-----