This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-core-12.1-squeeze-i386-vmdk.zip.sig
      gpg: Signature made Tue Jun  4 18:44:11 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  55c82eeef2fa56579dac8387bca6826d4abc96a3
    * md5sum   560070e92aa53b628caff8443d7d75ba

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRrjVyAAoJEIXCXpWhbrlNCDUH/24buRfEhMBc/HZOxeGx6FrN
DMjIDlEgJ2lYHAHJQnYGtOUZDYlq33iDGcXA6e0YibMlR68bSPc35A7pWh+ThBGi
F23/b32bmI8QOAVNfYf5PaFgR/uPSv1J/Jaf6KpO6+/x7TbRpwoqOkXXEhF2Sjau
UWoH0Q5JjkFOI25cqZR3MSVl24cGV7Jgnkpw6BsIJu5vQk6NuVW/4gkFrYXkrTav
0QpKeFdxVQd4PSPgpU0VU7ESLYkSy6WzNXSPBD+0M5A58578s3UiDo/WJXmOL/N7
w/nbIeF8vBIGEsrrwj9cAuaNJ8X5dQzzkiPyNAxTt6CsY5GvolYjs+xkr3Koaeo=
=tZQs
-----END PGP SIGNATURE-----