This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-tracks_12.1-1_amd64.tar.gz.sig gpg: Signature made Tue Jun 4 16:42:31 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 02fb7da0f6e420143822e3e97561e044f077489b * md5sum d9034df0565e4b1671727c49c65da0c4 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrhjuAAoJEIXCXpWhbrlNEqUIAL8V8BOs+c+SAycc9SOkAIdL NGtdBF7zERnOKnVr0ZarwFqaCXVvwZewLy9YEdfBYmO/njTSgM+/6fVR1zibaBjg p8CKlk7MXR3RpBQdino13bk/VcBD/Q26RSKqau3BHtG2Rbn78feC7sE9kUOYWKmi kVBP63tFzcvR+7fCkns3FJTXiXujHYmJET9yYP7X/rIu3qiI1UXzLYzmwwyzJkVP 8zFG0Xd5K191YIoqRtyZLMDFv2/p+fY0krWqbqNvoixvWtZdpdcJUu4bM91C/dh8 jPHD8nR5GIUnLPjXf9R9XNfzOPDtwCWMR8KB8V5SuM6taH44jkqxv0k4Mhgg6wI= =UyWQ -----END PGP SIGNATURE-----