This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-sitracker-12.1-squeeze-i386.iso.sig gpg: Signature made Thu Apr 18 14:00:40 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 5f7deb765054e8c52715680a987bfc0b7911df99 * md5sum 0b60186549581e384ecd1cdd722ffd28 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRb/x+AAoJEIXCXpWhbrlNA6kIAKmQzw36h/6M6VgnEUOmdYHS NqpTrfACl9YAczwZDcGlyJOkbVWDA3tJte5lnMWbrD2bxQXhWi7dsMPqJ94S8WLC kDxPszpJM2N79c6TDVUJLizTbUb4GXf4LmyxpULolMuU+5LcbGFku2WVB6S4FvLq OlK+BJzoCW4WuCmQ/RrH3wyiYOPUjk+bIaIdfEGIaOynfSGK6fEJRZhEmU7wv8V/ RAokAmZpYWJhy7V3rTwXoY+xRDTModyTLT4fr6leh6CyUZY4t4n9e+qZCj5lMquT b/6D6mMf5v9EJ8sHqGptFGkcUu+jk5fbIAIMcZBFzQoaVGJpjhEt6z/E5v2xlt8= =5gol -----END PGP SIGNATURE-----