This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-lamp_13.0-1_amd64.tar.gz.sig gpg: Signature made Wed Oct 16 08:55:58 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8a9aaa4671067eba933a00a9b340877526684976 * md5sum e72534e12224261c27d93d63bbbd82d2 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXlSYAAoJEIXCXpWhbrlNdaoIAL3TfYyp+yHmS6YwVEebu/Ug APB9Nx6yyhBsMCjChikIXn8dYkA7D5okl+x+rxmOcitovUjWEqxP/BceuO/4zXHT ZTxI8i3svI/QLTtSVn47tjGjI5fjSx98PhN6kFXn0DXzmm/Tm/DFF8N9eTTn28vr eHwHsmenC7y21TWKkZ4JQRlsro/gP01k2c6gcIzjSC4Q2puCOQ8KgJBQiQKDr7RM iTrqa+Wiox/11oXn9akHYvTyxVDSBjJ5tu3QJg7DGrJEpkQH9GoO66UqDQMaM/ng 11acFEp0zRzisVo7H8o1CDq8yk7CnbBRp/QAjrHDx3vnmVtEC9OwuSf5xA7GS3I= =PhHI -----END PGP SIGNATURE-----