This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-omeka-12.0-squeeze-x86.iso.sig gpg: Signature made Sat Aug 18 18:08:30 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 4e5653b87256b1d2cd1cd675371b78c9ea3ca3f9 * md5sum 5e019a51ae435b269beafa8b6b501b9c You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQL9oUAAoJEIXCXpWhbrlNm6UH/02mn7xV3f1bqH8j6+zYTHYq I6itq7gCJNgDa5iIhExWzDZX2LKxG5M3bDK0L28lD+1qrAGqiljnIR1/sRyA0zx7 leM8biUqWGOee87eC6mmaeIWZJusJhFy3aUeAc9Y/LjDWYKNpm/LawAkvm1esiIt 89Pf27/8oAsKskx07hSM6bmO/rCTZ95SsZxjLPYYlKVVt2fSZeucrjYXzevwjTlv 0YszCIZUPPkdeyABGDK2VTLRqZgWPb1GFI6iKxsUoexlLvTz5vP09tVv8Z8YY8t0 R2CZE0kFDolAtoWVFolaLV2fSmYqo9dor9u3GKnP644sHrfmF3FKxH/4tqrBMr0= =1BDs -----END PGP SIGNATURE-----