This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-ejabberd-13.0-wheezy-amd64.iso.sig gpg: Signature made Tue Oct 15 15:04:23 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 6ffa58f71531e9c2d0d1897954e87639e21ee0a5 * md5sum 488a2e913af379b1e47b2c7878a2e74a You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXVlvAAoJEIXCXpWhbrlNA50H/0P12stOQKkKzk4Dl4AWYOrB G9u5CjdD/3qKjfU8l5veVApS3zKB/t9im5jbq8aznXX4ump5Jn3SphypqKNrVBZp r00N4EtBcPrK4/rQqb1Z47DUE/2595EIhwISXUT2AUqLM1YcqJdbabTIQAlFah4Y iq4m7DP7hDaFW48zbBi5iVLmnp7hW9huuTdsZA0wfgb+t3BWGBx+loaNlBRQh2BI bGtJHh3k4nfdiX0QN54HAbATa7qnVqln4IUdYUqsy7ChF5O5FLdR7IuN+yjCTBtR VxtM08GRWIP2qpvtzPHnaQJ+wWyFBlIrdQaX9K6d9cbUga3PvNDeT9ah+d48zWY= =Rl1J -----END PGP SIGNATURE-----