This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-elgg-13.0rc3-wheezy-amd64.iso.sig gpg: Signature made Fri Sep 13 07:58:51 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8b6f75990de8944a4eddef5bb7ade77d81a3a48a * md5sum 576cf000d09ff623248f8b895364b511 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSMsW0AAoJEIXCXpWhbrlNm2EH/RRqlyLCQHp3fzkwedXPK3fz irt+ogiNyDD0rpgPMxTna3YlhMkcCjV892yMjMffHnq2JIDRo56GpoT/H3up3nhG YtDyyfaLMDz5G64Y/u740PnC447I0tScb7Tsqd2FGbMQHy99jArWN9ak4Lj3Uera UAk//BQTaMNAmx4+56LlL/J7Jvuk4vEIY0c+sD3a2SM5sORB9/Jhl1wZhp/s4/qt CFS5riMLlhkoapw2f3g4vuan5OhUE46FroB6lbBWzMYMg3kljHG+7R484yJsN1rS 1XLqlF8y8chiu2R2GO54gAu+8ihzRR18Or+O4wYRWwEquuppQCGJs/rHO9Dy65s= =Putu -----END PGP SIGNATURE-----