This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-bitkey-13.0.1-wheezy-amd64.iso.sig gpg: Signature made Mon Jun 16 14:13:44 IDT 2014 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 9b5ac98f9b69944f5801e9348a4a8a0f0d5644a3 * md5sum 70de32abe52e8ad7df591e7e150df276 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJTntFjAAoJEIXCXpWhbrlNZI8H/3kAv0DGnU3O6lYrSwzmbTYf qiFTigYMd83EeRdRalBt4Rc/7z5E5MWPPsSxPtoPhz+6T778W6H0nCc+QiJXQL90 uLbpWaHTlMABUj4ZQD8VMrj4YEthk3qzyMAC/NNui1RZHy8M8jEJUnlIjSELeTy7 q+SI6e/JK57ZOe7uq/IczjggrQecEXB+PeGADdy8/6GNB4akLQ1/O4Yb2THbV108 yEoRETx5U4bHFa92QRj8hitGp5dN+KZbuD7HBi3JRa2hw7RJb5nMYw/wSiEVKSH+ 3oyLRvsxRYl+M7e1I9EFOJfrNg3Q+D1LIZwIvLbgMtLDO8S1v0S14dNjSA4GZP4= =cEnt -----END PGP SIGNATURE-----