This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-moodle-13.0-wheezy-i386-xen.tar.bz2.sig gpg: Signature made Fri Nov 1 09:21:02 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 77c3010bf1075639258e0bcb5e2e7e9f8563ec1e * md5sum 9e40cc21671285458c2f48e531b4d697 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSc3J1AAoJEIXCXpWhbrlNIj8IAI5EAdma/hjVMws/r9CtHBjG i4BhjPg5Gs1jtBFj1HPtEtiigpKdxzHsWmIHLVJLOKhQZuEX3YWvNfXZe4VbLBTC xDSgbEQ+U7jHi4o2NAo2QI2ge1dBC1aKNSV9cvBZ40uZEYZYVYTYdfdWS5or/ErE W16lHbSdOjsC18+xt3a5PURyDgZQyYJ9j4weISzZWyWqiwEU/l611X7mSOtAM8Gx uito+y+bSA4ktuv7E63gJjx6Kr7jGbROTVTaSo6JcL11fdAiBJnSMzzF+IUzwaqB VHkzcbkS+deYfSNjEOs80UKU08rkz8zk8uPPCzjud21Tr0SpKyecJKFmP6TGM4Q= =/PzI -----END PGP SIGNATURE-----