This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-omeka-13.0-wheezy-amd64-xen.tar.bz2.sig gpg: Signature made Fri Nov 1 09:17:20 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 91a31e523743c5135d10cad8eee48a383000643a * md5sum 444c7f95bd97bf21c7845c01295431f3 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSc3GaAAoJEIXCXpWhbrlN9PkH/1ja/xA6YADlnOKwSFA1tU6M CzGm7pjh8XybreveCUKe06hhXn630uZpcvnTqgUPsLmEyQ5XHfzh3wvq1bxzGu9I 1DvQ6TIdr14J0p3NYfOIMzTP/VSCbTZw5ToEd+3g3BC+VJR4XafEKMNzQUJqA/C5 hUMHj0XVa8tTwVQeNZlc+Pwca/OPKNE9UNDQlICG5cpMs2mta1kKXR5CWAEVvy6s gGWKNWCSGmjJF9Dhn/2cVMqm9LeD71eQWFNjkxyj+XLlgN4cWF1jZPYmDy7LXQ1d A+6bDQYmWA5efaarvc8A/rwfiU0EiYZkfnSHcclQAs4dTYArJy90QhUL/FO3/rA= =8Mdb -----END PGP SIGNATURE-----