This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-owncloud_12.0-1_i386.tar.gz.sig gpg: Signature made Tue Aug 21 14:28:12 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum cf26776a3afdc8f8c87986041b36b7127cef444a * md5sum 4580e56fd9af72cc3818633cf3919a98 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM5rzAAoJEIXCXpWhbrlN32gIAI+nEluap4+mhJtstngjKYyy 66uYY8MK+/RI7RAc+x651Bfy/WestFo/yvqaUPA6B1a0E/ucCMbqQI1ItSN/FFhE RPsWep+dmCnxK2qW/TBrGhPdR/aUbZhRxtd0Jqoca5Oz+PaNQ44DgI+STlhtStXd 91/0D8cq/EvRZGz5LiirKncwzoSK2jSMEfHmZ1Ungya8nffBDSaFfOSgfkB87anJ YJx7PDW4E4tkQkdc28CfwuFK4dxbjXB2mPDoyHVga1zLlBcAabp7eS4WQo3ZVQZ2 albzP1yjW5Tm0hkoghSyf4EEOT4D5WDDHvhzWvJk/afxpT4xCAiDgCwLVl8Q7F0= =zMt6 -----END PGP SIGNATURE-----