This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-otrs-13.0rc3-wheezy-amd64.iso.sig gpg: Signature made Fri Sep 13 08:52:04 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 0e8fdcfa94c49a9000e0940089ac57685c454adc * md5sum ce5955c1216cfdcb1c09982ece035b7a You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSMtIrAAoJEIXCXpWhbrlN6QgIANGBx/Kyc351huZQ0U0PnE0t rM53e7hiEgKyeuzJggR7tUIP4KnrQ7EMJmWmILbRkUkYKts9O5HLSWb6ILFcH6TR Cxfu79EvgQJtoeMpnw9Jy0zz/1jXqnGuYszOUwmHaUd5y3PPee114G9Zlu/ZxqZC WyEgFvlxpBS/s2Ewj57SS5yIonYUgU1LAbnlzR0wulFeJ3AhAZcAoGxiHQYUw0/z ba1aTztovVyqJ8jM22f8nGZ2xs6rG8OEgpVef9csVRJr6DO6jsVkeDlyiq8sOrrc +Xzhhp1XkUnCtc5oElySAg2P/mPRjY/JY5SVxXcOfdm99dRiq8j3rDaWdRNnwvM= =F5tC -----END PGP SIGNATURE-----