This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-elgg_12.1-1_amd64.tar.gz.sig gpg: Signature made Tue Jun 4 13:19:37 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum e221819bba85a0ecc1bd11cb992fb99d122098d6 * md5sum 95400e34edd1c8ef2e3fda9af3105d77 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRreliAAoJEIXCXpWhbrlN6KQIAItvS6UrZCPO+Dmvulncc3dW PYafFcsWdDT6dBYhXlB8w8K6yIzcIOwvybSnQugqq10eP4Z5XuJfBELSzOdW5JdV KYCreWYl8VjH7+M3nsfC2jdeEFxNcLFT5L46BYpUz/QPY+ZefleHdk7SQ4+Rw/q1 a7cyNYReegVoB2CnV2vMvWR/OsbBEBCw+OTrf0Ab/Nj1ZQV1obNwiZS5JEMrLN4T 7za35iWrbSUINyTg2yWWao8k1amD3BNZTqwcBYQBhHHAPyExV9QOwuW5zmY4rvhT dQkSh5T8jUyr5SCAUu9Y9DVv3+P/NzGt/RN4hUhQrYkKabKlO/b2GBry0aUO6Eo= =8juI -----END PGP SIGNATURE-----