This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-etherpad-12.0-squeeze-x86-xen.tar.bz2.sig gpg: Signature made Tue Aug 21 15:33:18 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 827ed9f30ef2f5461c7333a9d0f503c4c499237c * md5sum 4fec3637c2db1a5ceac508e766f24680 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM6o1AAoJEIXCXpWhbrlNNVcH/j/WaJZr6TrF+4BVEqsSgkrK 45pSArvNCdSsqrewQqqipz1QUU2WQpg4u/6zGypYrpuD319kGXddGIWRhKjhh+q5 dSf2uSJe39OZ7EaXGaWAWjSlQGhOJL4NbWBk3Crz+6U3YibcP+pFT22WZozkRWQ6 CvrwPrZBfNOyMHYelLoaRAdmsNzsJxbLdU9k8YZyMUjjPArnpqX4jpyX49AdutxC /UyHtcDEaZxXDKISX2vFvYGkkasUGsd5benLLUVce/EJP4NdoI7JGTliNz7IDcxg 4vk4TPIaOmzmFlFCZbyxZBvLZFTG+D4CWZ89wjM7/Rs0CvA5umG3m1YcsodIzOI= =vbgp -----END PGP SIGNATURE-----