This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-django-12.0-squeeze-x86-openstack.tar.gz.sig gpg: Signature made Tue Aug 21 15:19:30 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 188c1cbcce8aa2eb93c9bc5c0f3e1fee94fabf65 * md5sum c662eee2db9665015e91a6ccad5f3cb1 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQM6b4AAoJEIXCXpWhbrlNlggH/RIrif6d6ydPpwiZAjmFTInW nR7IdCA7/6eFomRrJ0O0De8vQQnZ3KC96AIOOQcYsw6m7A3mp+672M/dJVKSZ1mT sLBpL4ZGDy3or23Jx7KUON4Dnm3qT/5w1Mr1dZsOgfTF+Fi9/VhGT2GyNiTHa1ND E9QgTbpDbEroAVQmsEgfo7G2igBZ7MhmmWcpBK0ZqZHmTnQPavr6hMU4mWXibqEw lULkz18gPmIOtgR6Kwuqwi0cfV0XEDuKVIbeJIpvrSwEQEShDxd/G6HYPYWYGlky MPqyz2wxB8C5xQtxkF8kGuFWa+7afLqhl0FYCaSf766EOcvgj7o6LOwgk4j+B+k= =QZrd -----END PGP SIGNATURE-----