This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-moodle-12.0-squeeze-x86-ovf.zip.sig gpg: Signature made Tue Aug 21 12:02:34 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 174227ba778e1b59e77ea83d8b38e5571dcd633e * md5sum 1fa37f86c31b422245907191a09e7d47 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM3jMAAoJEIXCXpWhbrlNTwYH/0AB4/tRXM65+Vb/hICW510D KS3Wvk+MGx+a2hSwrPoR2Xm8GeH3iEoD9wh8WxPf5v+RAE7t0CufmU/cUgF1PhiR WTJqWAeU5MSamvYOqyXKIjvj389Uezj6Qg/KicEWivibQEZMYtHauSQH+ns0keHY BDJlTDm8s9AcibJBe+EQeZvxtESNBDMO0tCWNr8a2iqOLRQE5ddJxlyotk1xiw3v lL14uoYgB8LPXHB0BoJXqqQL6PXN/h9Tgxc2U1x1+VX38EW2Jm+ko1HNkcBfMa3G l0VCgksg6S+luHzDkUrH9fmxAoHNoBDyLHn1tcyVwlvzDAOBrO2Cp++GDnlqWMs= =aQik -----END PGP SIGNATURE-----