This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-wordpress-12.1-squeeze-amd64-xen.tar.bz2.sig gpg: Signature made Tue Jun 4 17:30:05 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 6114aecd0f4191bbb66886ef730d9cfc06b62405 * md5sum 72cbf9f9c389a2de85dcf00f12a815f1 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRriQVAAoJEIXCXpWhbrlNp78H/R8dxqwnGuWgL53BvkVBPihB 8YI0hp8Al2JrM/Ds5vK8h7Gg3luUIqmsVr0Dqi/x7YhlZdnNdfHDLLP8xZmLP3kj Gtx1IqfBzR/k3zW8v8NVjV4e1v+mnYVmfTfyHDXaPrAdNoI8bAyB/c9PXFmGUf/l UUdIXuWYMZfLEOifaJoWerURgp1wWmi6aldAHXKgeFJtBwnhyVlflui+YHP1iec8 r3nG1hLNARoqxmV5EryQzTbfPitq5aLixNHnRqgwTT7LZyb0+m3XqLOgurnaCdM3 gBpk9h8EKfUZKUa08CFDILxOd5k8XsGgKv+YzmvXZkq2KmKUVFLG7BSZz5/6cvw= =3vYP -----END PGP SIGNATURE-----