This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-sencha_12.0-1_i386.tar.gz.sig gpg: Signature made Tue Aug 21 14:43:40 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum e50a1d5b86b0985f1964f20ef4216d0fef583895 * md5sum 04a3e0d55dd7d92ee662445a9f6c66b1 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM56IAAoJEIXCXpWhbrlNt4oIAMpe+krg3Ec1uvNRBogWmKFr Aw9SQgAbwFtuQEcTqZjsL4aiObg/+hsoiVwOndF8bdlenmrjTlvpdg6t1zHkD1tD P7yfmVWy/537FSfrqimp6KKUdUh60qr3X+x90OQDG4SRXu5Lib7plj4ZSpija6ga D98KwcZ8TfL4fBCTy999bKY3V+8FhRkKFQqybPJ0Y9vr0uyvE4Xf46zPHDRnzjtJ lsBQrDfk1X7tCFlv/bbvYGQb3wweAl714SjDufb0b3g0eLDEz1EUA+9UIDmELFqS Ygya1qySTGadjf7aemgWxr/FP/aLR5+JzRE9R6p//vrNd0/2qsqkW6jE9NpbY7w= =9AD6 -----END PGP SIGNATURE-----