This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-domain-controller_13.0-1_amd64.tar.gz.sig gpg: Signature made Wed Oct 16 08:22:53 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum d85f1aa502503f0c6ebcc167ea0e5c36a5a85d6d * md5sum a6afd266d6f8e5c432991bc665b23c08 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXkzWAAoJEIXCXpWhbrlNW/4H+wdhrHmCllsVoD1dveKcuIGi JLoMPPA354MW5HTHJ+fEWiHjM7jWsd23sNOAXya03dn3tOBIaUS5xsvGb8kIvkHM gYrd2mJ6ihostBszm2IHV1ORtjB8bh6pEFPQRjEDc8Q2uzGeNbvyn8QhoA6y1Q7Y iIrv+UdhEF8vEBrdjKnUbAlOxmKSOwYuaeGxzrH662Kz5qe4Qw/fypLpQpCdrx+x 3FluP+7OQVb6SdppOpHreFUWqErFPoU47IVHueHa8CYuQD+N8p4kNnVkZBKrHdCv QM1MI6C9noEsPlqxTKuj4UyoLu9tzpCPD86v9Y73Jm0Y2031pdwjEHAIIw3+zhA= =Xzbn -----END PGP SIGNATURE-----