This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-tracks-13.0rc3-wheezy-amd64.iso.sig gpg: Signature made Sun Sep 15 12:29:52 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum a41d98be25d164bf424d6fb762937c5927b6d5d4 * md5sum de0900dc14495d422cb2354e12ea619d You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSNagyAAoJEIXCXpWhbrlN5X8IAI64cp29vmrvn4g6if98ett3 4klrWAiXp8gB0Dwe7VXlw7oBuNVk1GK8WPjBMa62xV2A5XvQOLb1HAPF+XDBR+Iw XMTGTY3hEaKxv8QmLVrdT1gZFVSHsAJm9AYigCSfPNi68OHiVt8BxSY+sQBVO9qe aG9zIfZ2fBqyr6LyGgJPEBNGITPNVVT6JKd5UyBqE4imcLpml9W3YbJXGktJnQis GfIDhnc4N+1SvNbSXP8CAG3B1pHhXMrjXJgbdNGX6T4KQe/392st82jRidAWAzXP wRNqrG7sOavu9C+QmnvUvzs6iYpkTBS8b+95atcwWiDp86/6DmgpAjYAo/THpmc= =lvcy -----END PGP SIGNATURE-----