This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-etherpad-13.0-wheezy-i386.iso.sig gpg: Signature made Mon Oct 14 17:37:18 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum a1d010c70e5b98338d1d12bf9eda9660c5322a6b * md5sum be7ee5ec1fc710ffa0df2c6615d644ee You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXCvBAAoJEIXCXpWhbrlNHUwIAJwfc7fyZ0OIS9xG63kGZ5at vDiWAO4K60CWivRbBM5Y5K5vfUQ2vizyTT/4SbCpCrgaHJnMxegimRzkVhFrK1JR ciG+8/8gkfFzVVSiWTGoh5eTs4etg9QHSPP9AnnpkKZwnUMZTNWYD+zMiqGePrj4 i81zq4UVnP/Sn9tkiwqXHySZFOK6CBJYwdkl4muAGBURtHc1AcszBHgNRBGr1Bk4 5diNhpt8WJVBLhTSx41fqkorEcIU+2D/alf2JwtSmjWnen5eKJgxZiKJebedRC3k HngzNO1xEsFcQlGrXqgsvOfnkEBg0KY+ZE86bsIhrzzirWQy7K+WBYV9IpsG7xs= =lvJg -----END PGP SIGNATURE-----