This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-etherpad-12.1-squeeze-i386-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 21:22:33 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 6ddb9da04ed8f8a2e2f7aa1b7b1b450209b1092c * md5sum 85a8364b3474132d6dbfcd4b882dca42 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrlqJAAoJEIXCXpWhbrlNg0oH/0jYxQV/1lrIK0SNL3aXLGfJ 7GbTIVsBTFnyIi/GJk6YunC+gfAtd17sibyE+j4PHAjgu2uxntPS5gnp7ASoUAVY vfr47oyo/Q+mohGOn+lF3EymixInHSmN6b9fUaxz93+eheOhjViHl+alczk3lvoU 2h6850xvxSSoTCSNWDO6VBDx5PlBXEQcL9PhHd6zLHymlrTUV/JIUjgXQjWXALKU AWtCnd+NldGDEdBouTT/cMgcikNp4li2uuSM9JYGQJreVoYGq7rLiIyk/J4s7PUD RSfWvRlIKiE/26s8bgcFiNIiDWrsd/GBak9zqQ+xx5QjWuo2M0FGB+rnACE4IQQ= =231i -----END PGP SIGNATURE-----