This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-django-12.0-squeeze-x86-ovf.zip.sig gpg: Signature made Tue Aug 21 11:38:09 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 291cedc7302a361b4011e3c79b23b86054fe55b9 * md5sum 9d2540b369e0abfe0beb434af65dcafa You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM3MVAAoJEIXCXpWhbrlNiS0H/3TJBCXJ6meW4Tdi3/sJfPl/ A97FFmsNvkBFMjLLGhjui5wf7VWLByOrrNs1ij99mL45v91w1P57byjf2jaJPcq5 aNSdp5hrJ6araPJSmKs9gW+JI5PeME6XCrVsKO4GqLjmMOfHSczlNONgVljbhQ6S kFucn5rzkegKUdc6MRwghgYXQq2cAB4SMD98aNpR7gOw0Lbk1iY1gd3wJ4sHVRSB 0BRQhACZci8RKd2OM8+rFyuNMU5vompzeK/cA+iGlbIZy2JEc3aWNwUuuXM3pUI5 nGLcjihKyMgX+bYtXKBzGw+38rnbdBbFFkPoaQSLKCr9EvB8Oo8JmXe1GsUewXg= =jBbJ -----END PGP SIGNATURE-----