This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-tkldev-12.1-squeeze-amd64.iso.sig gpg: Signature made Sun Jul 14 11:00:59 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum f58b421304b4c5f7014f894e6c90663096c46c1a * md5sum 9048aafdc5c5f8bd62186d4d221617da You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJR4oTlAAoJEIXCXpWhbrlNc50H/j7owAs7IYdsnYvTjqXJx7Pk B9lsfoDMhdRWNrK36mYgBrbANAAYTXT3nQI7JgK/1To+wcHWPOMSaAXh0oOVRKp4 /3r5Q+Kv1mBgLyqs70TbmV/vqnVZMAEeDhTGxafJExIdVdxk9F/3XYxe4aW6S8uM qQ960eGCRmdYigmgczjmdiF9LUagTs++ewg1BWcxmCxAMHLJziiVPBJB9EHRVS3H 16UqjvH896cBziT1gDRDVuWyEOgmGg3gAeX5PraFn2mIfXQO7D9A1qaQP7gtvNtX eC3ORxm96clmKOuShHlFuLhBLentL3lif1pSFoncKY064J5CSzc+XRwdF2gIHnk= =iipc -----END PGP SIGNATURE-----