This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-canvas-13.0-wheezy-i386-openstack.tar.gz.sig gpg: Signature made Tue Oct 15 15:27:25 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum bf69ce4e360d93d4a15c8ad3fb2a8ba717948a00 * md5sum f80682e68ff0153e89e505773c8ee314 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXV7BAAoJEIXCXpWhbrlNGbMH/1yFQCSNY0ZXZYTH2M8EU12p cpI3gRh6xwgdqjadmFRJ/vstoyCe+qTiUCzbYWc5LyxlVIxkE9ACcSw/LaMTUaK3 mnZRT8G9cxQUfqii0y7fveKHPqPyejToMPcaEOx9V8LrG/hVsTHFJzs5MWo5x2nB 6CoNXTa769e9o9uN++qb4P4ZDwFdfNOYEf1RPplp67hex95KGN2gv0+85oyQWRKy VuPp7D6Aksu2FanJl17+UXXy4gfQtXbtXH2x1JEpwVKf0RUb3tlClL0Af1PztFHD bbFqtWjzHh6tFeictf3Bs1+uN1pBtI135e6sqQvcJ1aKktCP2RzpxbH5fS9fDlg= =6kVe -----END PGP SIGNATURE-----