This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-lamp_12.1-1_i386.tar.gz.sig gpg: Signature made Tue Jun 4 21:44:12 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum aabfb6595633f2f19f1b481e56b6de779d34d167 * md5sum d56e25e46c39f1270d94e09429d3f0bd You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrl+jAAoJEIXCXpWhbrlNZBwIAML14hO+plzlwlxAoHKUxj4v MfXqzvx0SRSbJLT72/U8zU3idnPww2B0tCVtZOXwsCvYo+1Y9H1rB8p5FdIssOxL muAs7CQ5jjWWVKE1lM7cka2aPLixldy5Ap26sFV+G9L6G3M1XlVKIuEXoyr+yxvA vbdUwn9bfyb8QtmO25FYPWG5Y3wlfEHNPOkv9VlWgM89WNiX7gl/m2nb/nSqND+B pP+aVePKqfHyeC99PC0ooctgv227t0H/cUi9AFp19q1DSXT1c4+E46XEx5bbkALO EDoQtvroqZMt8xM7Mz/6YOWIEMEQA2qtidmEjq5W01Ec2ZvMHfCUz1vdztXReA8= =dkIs -----END PGP SIGNATURE-----