This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-clipbucket-12.0-squeeze-x86.iso.sig gpg: Signature made Sat Aug 18 17:29:45 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum e1ded94a2af521e61425d263346907505a23711c * md5sum e509084ff0c8f73bfbe9f482cea3a871 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQL9D+AAoJEIXCXpWhbrlNQuYIALBRjHTg87CptetrigWoknip DmkhAAbLY6SRW4Yrd2nL0zQOzTvp6Sv9Je9a8whvoWng2wYkHCBgo7N8+T3do9H+ 8QZOXOz34Ig96InlI6r/erLJszcA6WOEheP6m52GCSgTDl06Or+AUr5Zo9ZrD5Mx oufVrftqBvr937JryBHY5edpwAeEfGgZXP7QYfPY4KBxmIyWk8Q1u7V1cSGY2TgR fuwdMEBkR2H1ROKue5ZkJZMoxKCbIkPVhkJtkdffJvNRlWVNLslXlzTxt6D6d0Lq hn7Cysl3JtuE1OY1JdGpML1LCDXBXbwACd14FoE5mgMb1ROA6M5AfkZ03gPA63c= =T01i -----END PGP SIGNATURE-----