This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-clipbucket-13.0-wheezy-i386.iso.sig gpg: Signature made Mon Oct 14 17:13:01 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 20ccbe2c0e2e0119b5118b3afd2b197e48b7aeaa * md5sum 820b844ce8c2d641b598a757d751fe81 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXCYRAAoJEIXCXpWhbrlNjz4IAM8DGWM58jR3OV4LziuHeYMZ vBC5nGJtPpBeTj+kEvTqmzoVx4OS5nUsczkE17JIUyWUCaY1UtmnD6aHlXUhtySE FBwJPxKZqrT9Njj7YwRtPBqe3rLAUdKRO4+U7lD+Th0/x87myeU9gOLZtzP9UXu5 k7KgabX8GTJFO14DgVRncsGlOK8wYzPUs2KH8CR+RiPPRYep5X/4DMxmwbrIL/AS sQmSLaZkeTTG3vuuyIroYS119PBkE/AFI+TDrkhSz5f+eikkgIAXQwM9G0dsdkQb hjOxZtxW/FbEds4NNu79QXnpwXn7y3Ma5erQKQ63AMmXl0yrN7WvtZymebfGL4w= =kHV7 -----END PGP SIGNATURE-----