This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-torrentserver-13.0-wheezy-amd64-ovf.zip.sig gpg: Signature made Wed Oct 16 10:27:40 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 8ea1177a1581e7fe15b3fbadc3eb60da077ac36e * md5sum c09ea9eeadf574adf7224c6f69ed03d6 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXmoSAAoJEIXCXpWhbrlNTTcIAN/zWaE9+iu3AJ0GM3czvEqx QV7p7qian9CzXXtrYh9JjRWmdF9yVdcDGIysCOJIiI+Q9HGrnPJ5SA4t6St1Seu1 mIXD41DgSnZ5PErApFMqIIM9cO/UB056C6fH9u3D4QrOiUZbI7CfkQYuxQ8+10H5 XaJWrQaDlJOZ4+8eg1xzmF+XNVQ+lA+9wEzUOyHWwMyT9sCxuGcpTmnt48xlvhlb R8KyA08HEI5G9lp8aTyGpXnCYyxU94rNnaa81rBLr/96HHHbtWE9fLvJlYAV1baj 20d+y+qTSC5PNwDpCfBkIh89nggn/tcnYPPeXshoqZ38KuOLefTjea9teT1GuGI= =0LZw -----END PGP SIGNATURE-----