This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-appengine-python-13.0-wheezy-amd64-openstack.tar.gz.sig gpg: Signature made Wed Oct 16 08:29:28 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 43f915f3b287508f98fcb3ab07279319d0d64c7c * md5sum a338cf50a98e2b28cc7b530322e79ffe You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXk5gAAoJEIXCXpWhbrlNUm0H/j78lFiyBU4ZHmxiHEx+MXPn p19EV1Vz/rLaEDcpTfWEUEfRHqHGhUHaV1damC6hR16N55duzJJJrN+0YSgGSKWR 3FeqB1tajhxatrscLDN7p9Qz45k8sStHZH9dGHsPgrXK7Ih0EjpHZuZKnZmg7EAl ODPXxVIRg/7cG+gRmV4LaVna+6yvqhukQtXE2cN6ql24ya4bqtBFYK6qsjkB6lIl hE5fjLRvqz0P9tK7uAL2GcsCeDCHKN8nHkL4b4yGf+e4v0Qc94UaMAMiWJXbnbtt kTVn2Y5hbF1cZHdShxEVILbC2BiCHXnjJJq+BzXsAeGoDVgBn3jURlYE9jQeZyo= =TDQQ -----END PGP SIGNATURE-----