This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-postgresql-12.1-squeeze-i386.iso.sig gpg: Signature made Thu Apr 18 16:04:09 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 05443dc84b500f9174ef00bf560f92a4d5a0e906 * md5sum 32466800e6c2aca7fcff85b8ea0a6cae You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRcBlxAAoJEIXCXpWhbrlNG50H/RDYasLbx8r6Z+vP00QqTGBI 9rRimRysaWbYQIZr2owSjx371pdm94xGyDMd9nv99wgS5kj26/XtIftvBLL3E0Ls uTVRB/efi6oryzLP8z5d2qcsfEVObh3XqauTQEI1EwpIehk0LAIxGcaHWfqbbWcK mHug2wbWBTXzxAgEpJGqpH1TIFYx+WHWITglGfqnN4CvmIuK1U8zB9laqiSa91vP OKpYSDv81bvP45opzPJ6ikP3xQ7i7sxp82EAY7TBIl2Wg9Q8pn5DrqoQFKZcoDiH rKompjwfbYa+dn+ylucDi4J2PEpdGjGqGZeBv7HzinvC331q+xCKdmROJ1oHkpA= =aYHG -----END PGP SIGNATURE-----