This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-django-13.0-wheezy-amd64.iso.sig gpg: Signature made Tue Oct 15 15:03:27 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8268c2bb27e709930eb8914dc8fd4f596497f5d8 * md5sum 7066b4ee25c1fa4df5a2205f26c43e77 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXVk1AAoJEIXCXpWhbrlNK4kIANyttM6aK4EVTBwKS3EjVKKL Zb4LRRuuBbPaPpyrbLiicoQfl4zA3jsB3JTZvFJz4vVzn/MXrV5APos8EhJFKNbi NAECSwsWPO9leMtKppKHaPTFhOOK47fARXk8k3PCq6SKDJ3h06RQZUuyVFWuInvB CUmin7FfoTfcNvs6QC1z4VXMTuMYtLEQAVZemZ0vjpLqsOiuRRnMf0yQSiGqytkr zfdHjg/uTyxBzFDbMjxis+krkA7SrHfgsOehNLJNDb0JPK3jYvMn+UH/t8Ut3wVI sgGQQg3J04X/x2XF9qjBqGgtG7DYdLE2Eshcm1fggXDTEdtqI+j/SAxH/otGyI4= =Y7Bh -----END PGP SIGNATURE-----