This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-wordpress_12.0-1_i386.tar.gz.sig gpg: Signature made Tue Aug 21 14:55:44 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 525fc461007eb5057fa480e3dcaf3f51831da253 * md5sum 4d3f2a9ea5f25d1da49140e4289055ae You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM6FoAAoJEIXCXpWhbrlN+MsIAOHeuY70FTABD+3rJEfpeGy+ SoNYwaacXrQ/iReDJHPias0oa036s0CwV0km6xgy6WhyDq4GBGMLXGR6lSYibga7 Q2lyh8Z2owvxALPjZyCfV8GoQjL5Qk4jD+c+IAlEGBu7DTRBwa1tuOq2YZWeFAoG TSR0yr1hST6A5o3ue5HBfO10bdFmtaBoHRzQ+6BaZMXg1WESLFhijSD0a3V5uPfM X1xDGHJ3fzqkpYPj/z3OOHTZpltiR60OzY8JaUr9wdaDAPOGT34nXk+jbajBNUbN KZ6JXoHiTxXPhQiw6jt4puRkdLjzF3BB7AbN/pHRUitpB0hALgHVNCAJzQMz4bY= =2znf -----END PGP SIGNATURE-----