This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-mediawiki-13.0-wheezy-i386.iso.sig gpg: Signature made Mon Oct 14 18:03:04 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum d387a72a07682d2c3dba29a149ddf5477ebe66eb * md5sum 1fa595d50f449541ebcb5897e5e10f07 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXDHMAAoJEIXCXpWhbrlNIjkH/j3ALQAbB6RnMq5nuggyVHr4 XfqlKOF2WvrLdIBIlkXmtfbOCah1Iftq4vwWakiLz5+Y7eYIfMTdM8ciM6IJryrr AyHYXDE3NsuIro+WHKncLAuaI6cbXf5ln/BTqt3Ai4NFuWa0On7N84kg+2wYFVmQ GLSYkBfPInG4viDu5DHjBu9ez95DnmcpHt9IOjSZqn1FZ0cOTaf4tn9arNzfz/Zn icOGXiZmWZCv+qsyrv38+ugWybAzJKNUNcWw9QLH98kQExG7rgch9Na5W0kczZ59 4dCdaSFQFPxV/QbS/T/0gLa1I88F9qW6g4/sCNkWkQcze03CjK/jMB2P70sfaEM= =m2+v -----END PGP SIGNATURE-----