This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-core-13.0-wheezy-i386.iso.sig gpg: Signature made Mon Oct 14 16:51:26 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 5e5c195af712dc75a5fe8993188541eb4ff62e14 * md5sum 9944f9a744fa670024a4917ea35bee8f You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXCEHAAoJEIXCXpWhbrlN7b4IAITQdbEnG3ZhYi+eDMQ0xPQI sjVuyFA0f4Y0unFClzIy8kkcTgfLLGkbAReQ3yEdsMI2owWiWPAlx1dpZKeYH57L aJpFxhwnqfijh58yyDLZ6ZRVpXclRkfSVGM3JZkBP3SK6vVeK3s7Hbyk1y7iR+6j sr+BIje+AurK6iJP6wMWVyMcxdYH1EibTduKvfRQfyuupy8rc7n2sO5GO3BlOU8V o9D2THEHwB9/T5YKKggtQQc1q0/vhncOoJAJJsc35AVx1Y2w0oNsqnri2yrWNGTc VEzYTfUFDsgkDOgCDE0Pv1tE1crfn+vKdYnhwEMo//QyhvpSYldyPA3TW7FcOLA= =CKRH -----END PGP SIGNATURE-----