This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-tracks-12.1-squeeze-amd64-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 16:48:34 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 44925f615258b0e0bfb7cd1c4088fe8af51e004e * md5sum 6d00ad6108fd349322d9fd3af271ba38 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrhpXAAoJEIXCXpWhbrlNwNcH/3Dj3R+TaQsftKyF4jX/gSpj kpbaXzRoA+jZO7Xg19ePauXLXsiOqkMIR98wCnGxP1yV+wswjz+BM63dzOLlNnQd Lp1uXEQP6xlr7NVcwFiROvuULjBPBc8qM0lqn+suJ4G/16iGXpOuqrQlGssx/9OP oTKbkEpmnTKAxjK4MSJYzZ0a4Z8cR1tXqWlw/XSjZ2MpBh447eltlnuy7erij+Dr xF/MNJl/AaZ9Far474ykhAeS7T7N4v2FQNxcGTED0zxaOJA8OLXIm3s54OPVD+10 muAv28JzY6BPu0BTIm2w9RP3ZyYz77FadKGHOWXF4N+U6dGcJ0boxhbT26G+wPI= =2avP -----END PGP SIGNATURE-----