This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-ejabberd-13.0-wheezy-amd64-xen.tar.bz2.sig gpg: Signature made Fri Nov 1 08:56:32 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 35be495dc0a111c30f11fa61538e768a9ea4e1e6 * md5sum ccc05ff8c632382d6b59df796f57844a You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSc2y6AAoJEIXCXpWhbrlNZ94H/A/LDl76YsaI7nYuQSpRcvMU 1X9XXYWt+XuqIltWIbyGunzRBzCTDGS9+x+vCrB15JfiQHsFhSuO+CcTSX51tk36 Zi2EZiNkZTuzt2JK3awwH0Rk/GxqGoBzwB96A7c5SQe1GEywjgWhbVVm9GjO7ykD DksA2Ykr2UfP6q10PZUCJVUjtKvyEo+j9XXrnZWppFMuTJp8C+4oBS9nRIFPPPcl PM4xJinA4ANNddvOOM9soCBMHxU7ydh0BcqojdbBrRBIP7jqwYTRgWFROJQAqMBZ JxdIfD3SlGYZuzAt/X09Rnl92BA7Zi7tAcWU2EA4Ulc+2oANWPLcxhyM6WaEsTk= =lrAb -----END PGP SIGNATURE-----