This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-torrentserver-12.1-squeeze-amd64-ovf.zip.sig gpg: Signature made Tue Jun 4 16:33:59 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum c857080a72ccca8ea79330f4252e449be237cd60 * md5sum 02395bdaef394166c69bfd5b02a47182 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrhbuAAoJEIXCXpWhbrlNJtwH/RqHwN2GqxTbLqXeh2SGzUZp JlCqAj1U8a9EFAfPmaNFev6MEWHMe3gtcN4OpM13O6hWH+uGINt9spujOiT/x6Qd kzw+C7nQfvn/knFo+Qon10NfgXDUV9XqYepR7htjH5x8MOU/tVu7CUd7pt+iFIOw F7F+bEql0kvNJFK4sBkbRYboFA0lQPZWZuc7Y8be1cfcIiZe81cX4ATs2nF2Dgwu J3/YHqIw8kO6XuoZb2GuEw/Q5oVP3X9VHHu2gDL4uCJMjoF+Oi0vEoeKmGFOyNOJ 4UF2/9963yknIr4YwY+URaWj4rOC7w3WC0YqCm+4dwi9wZMtBeojrUA8z27kzX0= =CZen -----END PGP SIGNATURE-----