This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-jenkins-12.1-squeeze-amd64-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 13:50:16 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8e5135dda3d9aff3d866a5961026226ed0cf7e82 * md5sum acde8f257f295a0b038a8306841544f6 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrfCJAAoJEIXCXpWhbrlNDekIAKADLZQFVrystaUkzpBYdn9m fY/i61hChB4HRPDNMMHHFpBuaT6yDGhoSSLl+nESoI/QO14Qf9b/SmQecBhAn81K NlZnfAeaLSxJXoXfgeULiToxbp6VxyakLc/xX6J6Dw87iO6kBd/IcHLWk5FyrU5X Qh1cXbG9e9EE9TjwyMj5T0AN+WEJK4JBom6t26YbskD64bz9cKS1diuzrDCIt/dO Dha9vKrAWfyYQC9DeCnlJRM6ZOYi0GTJFQ6XRan0eeKKQafLJa1d4MZFgbTUZOzE /cxvBA3llG1QMf1jgvEGuwQqZrHJtUGrRqnAC+TUzNsOZY6+mEKfCaouaBNdw4o= =5GxC -----END PGP SIGNATURE-----