This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-appengine-python-12.1-squeeze-amd64-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 12:32:48 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 9d41cbe0e5a224863daee411cb76203fc9b74a24 * md5sum 7a3f57f56d3147f374e8938c9f532cd0 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrd5lAAoJEIXCXpWhbrlNcZkIAK3dJmbY1v91J3PS7pEnqG/c bcCHZ3tV1i9dsyhg5SFR8s8rAkDly1MQ+G2XqT4mOJY8eiG7ljGgE4k1/12/g6lc a1vizYcJoOwd2T3PAYy3yqoX1OqB+kmaxOdi9EOwe/prVi8iMhLvOhiVsllYMYtZ HbHDvpnkyALawpZ2aKO7BBxM/FBXBkMG4AJNfVlFkm2V9qcdkHw46DCD8nUbdq0a SiPfMIhpn/kc27ZiIleodbD6CRHaN9Vdz6/q4pPcIhl2z+jw/PDnzEm3PSkYjIyp r8kLxpqwvROl/kP2550rK8clXh54a55v6EnHysFW9GoH2n68QVOs+N3Cq2MX2Cc= =AJE0 -----END PGP SIGNATURE-----