This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-etherpad-13.0-wheezy-amd64.iso.sig gpg: Signature made Tue Oct 15 15:15:30 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum cfedf633eef02f701c9fea844c5c6d89f897c9cc * md5sum 96e006e30fb4af1833b87ce81e88e638 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXVwIAAoJEIXCXpWhbrlNI4UH/0jrSsvOEujRKrXgOAR0+vO8 E6Q1tNBkxxlbmKnu2uWOuQ81q2hE24FRD8AHQBR5RlgvnDcGGce5oKf9iSMXz5CG nwiWtjs3Ntzk59kNlfikoL0FPVl7vwMygLD7A+3FvoNtukrYX5DTPlb3NSXXXFwA qyWxj+ooYXBGNB9EYwzMswahPFpzsmGjUCZasIYsiup9jlKl3CxVb02UFWNBTAqZ AOsZiU3wYqJGqNX4uhjI7RHN3OuO20A3zgMOIopz2Rx+LNjCfHVb5WhrzvDScapd L3iiYHmNd83mzO2ZphBmORuuA5/lEf1h9z17MWI0YOWJhH2ui9+tuCWAtcaZnd8= =ZR6/ -----END PGP SIGNATURE-----