This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-sahana-eden-12.1-squeeze-amd64-vmdk.zip.sig gpg: Signature made Tue Jun 4 15:55:22 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 5a754ef9cc5bb10f6b8aaaa033ea66b7e46f5cf2 * md5sum f8a29345d7312ef87ab55b565dae8db8 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrg3gAAoJEIXCXpWhbrlNXacIALZnmc6ywUiUw+qdWLkd6fgW ft1Txb4DS9MM5dLigKAIdvazSIjQfVfOIVAGzRgZdJPnpyfs2UpnEood4AQBSV4t FGURQexUjNXXh2SlI0B3PZBpwsk5QY3sQVXm8FYVfuoMFUYEZD22sclZ1Las/5s2 nlLeL5I5QUas7lOnW8Z7pm61mp0G/gKkOwtdUOY9UOR4Uazv1CgJS9kPTmeSGzwV 5dZS5X6F/hM5GrHxqfBhuXrRoy/1n0lnDG2NM8sAYIwHFIxk51C8rQuZHJAsHJ4T R3cSphj8/MfxT6DITscR6QWtUW4a2gZt1AME0aA8GqlAmpv//ffCArVkf8L8kkw= =MfvH -----END PGP SIGNATURE-----