This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-phplist-13.0-wheezy-i386-ovf.zip.sig gpg: Signature made Tue Oct 15 17:42:06 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 4b6b9746d5547b178fa40a696e66d84ae1362e7b * md5sum db4cb6819f81bcac5990cb26dd08552d You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXX5jAAoJEIXCXpWhbrlNL+cH/RIDvfL92zma3TXQjTJ1aPW6 IfKYkfroHnbf4zHjRsxDES361fS74zJeSejyAzSvDHn2R+bTAsXhkUnSth4al8jM oJTdVGhEACw1GWFDG5/9ZU+FVH54EIKLceREtzIORmPOaZrv18hpK5qp0wscUdvk HTb4JIo2Exm32TrqmCXmCjNaiqg3z64z0gAH5j0hOAE1dezMipppBl2tDe2u9jF3 YmAMsKs60Mip4G1c1XlDJjGwo0d2MkVzGHdetFM3U0I4dBwaabO7K51WjLjHO86V 89voP+yrwjRlHoyi3AopDwyJQKu6DbXXSBzCn6mXFk8CTaag8aUMMhS4Jk7VcN4= =EJBZ -----END PGP SIGNATURE-----