This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-django-13.0-wheezy-i386.iso.sig gpg: Signature made Mon Oct 14 17:27:57 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 753ae980b248f760c1393d555c69177af2477f40 * md5sum ba5760e9b5be6d55b5d977752354d023 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXCmSAAoJEIXCXpWhbrlNurEH/jbg2GL7Cc7gN9ltSDU5yEZ1 QuLjJXfjc0RXysiTTw0tS2hJ1XlesTmGfX4Vs21kEr2XLC1ppplRMPNuYCi+viPL MNhiCbhqdd7VcQHAThkFolccWvMBlZXqzYeGu03gqxj6bFEas2I6QVtVTrV2Lvej +s7OYXSSX6ww//+m2ak+bVDcwEWccNYAnZQuHDmyPMmBXycGxBxHR222sdaMyxP3 Rvf3ZzuCmw1vfOkP2n9DI4H8ktTnFxvTBPjE1ijthtT7GG8hwz/G1TMJ0arRhOT7 v+JskIOG4FKOLi8A3dvi4n4AwAHVPoRvKXk3H/2AR0D8DE/yIR0CWSqTR2FHT/E= =2Yag -----END PGP SIGNATURE-----