This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-deki_12.1-1_amd64.tar.gz.sig gpg: Signature made Tue Jun 4 13:05:13 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 15f4a55d1ebb4086a2ae23db8f75c294be3b663b * md5sum 8d68934a7a61a254442234da630f932c You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRreYAAAoJEIXCXpWhbrlNnJAIAImwiiJixPFUDb8rHfyItHtY BmSv8zs/szmZN60B9EvR4/4aM7VS9gXU0V1R5KlwF2DbV0/GkUDJouAuNYeHEyhC LLosWNeK6pi9sjJNFad2UBdW4tPkYq84uu6BIfRIh5ZtApWmEGcs9bD0T78ghSV8 QC1LL8/LcFziKG7MTu0/MxgJnjtwp9ss72xz3kWeeTEwGA5KN1NazmC8Nf6W42bO 2sagKSaEqXanTGX/X/qup1iZrCFcdrSleFK+zfCYRrVWrSDBEMFr7o1d8TMtyRRj pn8D7DH9oKJ6CerxfeX21YQNIs1/ESqgpH7z22J5gBt+EJwPs8ZPMHZWUgSLVbA= =YYyX -----END PGP SIGNATURE-----