This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-clipbucket_12.1-1_i386.tar.gz.sig gpg: Signature made Tue Jun 4 20:17:51 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 50d42d1c34b5f05d9ee7cbbdf4d61f097e2b289a * md5sum 1ea5e16d560869341abfc9fcf9537fb4 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrktjAAoJEIXCXpWhbrlNrM4IAJDwV+WuNqjgj24ZpS6mnNas 0p7JvvBM07GrpNIs8hpjDzWmFwpyQYCv28uDTa+kPyQwlVoi0k+wnoLs06Sdk37g +X11K4q0IwpsZyfL7Q3Vk8w8mWTE3GrhOT2w81WcmFHtsKX3q3W8cKzcSFG41mYA 1RVjHiO5m4q5TiJV0dnT1QbgC9n7cEnRJNSMCc8qs7ke8FaLcyIrQRQS6fpRCuzU ursNfUYJ97T8IE3BY2KxNc5vH8Axaq6You0oS7xFVpUEGXf1uXWKn9Zi/t4/oGCG N9NXS+p9y5fQORMDQFeisg6sdg1koh0WocxA39pXNyVG8bE/CR2tO4IfypiJI9s= =pb98 -----END PGP SIGNATURE-----