This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-lapp-13.0-wheezy-amd64.iso.sig gpg: Signature made Tue Oct 15 15:24:58 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 89ecb43b0037fc8e562444b4e1178df99e7a51a7 * md5sum 9a6d19b669036debc0ee73e3996ba065 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXV5DAAoJEIXCXpWhbrlNeV4IAJvhwFcyyABkkxot8TQUHYv4 RXYyr0PUidJvgzyRxQ1FP83YdMcGFJ5KEc7kTSrJHhNfDra71kgcPLzvSG2WoPgJ 7m+zIe5HJLXdg3/W3O54ECCOVdE/WbF8cSd7lwYuMA9hBRQPjo+jQ/iYu0/ZFuul E9vDmZDxDKjtPsL6wBuZCWbgSw4BANfrzvigWXF8apUG01W89X3OkegwlhwK5ENM mZxMnG9kif1L5ccaeYWGWveEe52kVH7z5cxyggzN17uveF3f7MYs0KQhXbfLHtgx kPS6kT7QyIpNKftoJJxLUEgg/ah+bnAgv7ypfbVF2J0HS1Mn5lI+hGoTQGZoOCk= =gwCB -----END PGP SIGNATURE-----