This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-mediawiki-13.0-wheezy-amd64-ovf.zip.sig gpg: Signature made Wed Oct 16 09:22:54 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8f97baee53fea11dfdaaad789f67f28f7295ee73 * md5sum dc5ee6ff0f07f8dddd65dd0d5223c7c5 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXlrjAAoJEIXCXpWhbrlN4GwH/3tuFA7Viybd97UUfHFnhE43 bP5tFRrjprKifmjU4rrHaDpMBud4BOeTVsxbFcFliBNRDifDAELkq0Grii4FNo55 mVnn9OoAoikAPTA4qQT0Am/2WiKSyqyUBZRD24DYtDq+xfIeRLyKIDo11Z2gn1Ae MVJPgxYVjmPIBysC16PhhK9USqnDmq2ob7Gk9vTC2zKbv33yrv5lFnkMX56uq6gI y/uZjpMlGcPaFFa8Bvmacc83alCQ5V5LIFm0jbcXIJTMRdWusblNmGyZzQFo2oWc phFNd82QLfo40k0Q8/goWrtwYmR6tx8P/Iy8G51Dd86t+EGKy+OXUIVJLxYGI1I= =4qkC -----END PGP SIGNATURE-----