This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-domain-controller-13.0rc3-wheezy-amd64.iso.sig gpg: Signature made Fri Sep 13 07:50:33 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 1d4d7a848421b26051c6a9bce144277f0fded2f4 * md5sum 2dc84a6d8c07fbe229d6af740d7684a3 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSMsPBAAoJEIXCXpWhbrlN0goH/im/Drwb2jle8VqDmfquuT2z doxbKoOIaOzaJloQopGlzNd+U+jkeIIAXbeFNJ1A+Naa7B+/SSqIx7Hs5di6QEEf P12wJTbM8G2bgsffOvfRcQGU0ous12MZYrUfkk7wG9WRaFvelgu8dnagOZf/MJ7m UiQtsvYS2USRGMJ9WAB+cMjkOD/cbTsxtMwcFF17jz7m+AGA+DkYhzA/8xQgjPor 1fvi6aEeMGA+p7pgmRxR5rmA4uDDZ51q0KFdSl1nbOxy6Gdk1ZzGv6EH6g7DGoYF qNxzkMK2iURdr3+wKtvexiHvXxygQYwXFrkojv0eP4fviusvImWaKuCY6VXVK24= =BddP -----END PGP SIGNATURE-----