This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-roundup-12.1-squeeze-i386-xen.tar.bz2.sig
      gpg: Signature made Wed Jun  5 00:04:39 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  af4a2303488a89e0c50a311ff4862f13dea01cb3
    * md5sum   bfbba5702e7970d16bef4ab7b544d0bc

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRroCNAAoJEIXCXpWhbrlNcJ0IAJvM8qAPnnAo+DdA5EJS1yu2
wgw6qOQXzGW97Adv++/WsJGEyqJ08z6ho/T3okq3v9WLWhuQBh0+f8uIrwQ/z+KS
c8jqw53mPZVvT1GlAyveE7H2oZbwjb8eo1CxA93SI3QF6f7q+6mqtRWsUBMd4bvf
0XYyFQA23rAiGSi3OnuPCUvqu18hOK4GFTCllkuj249ymhDIa28QocI9EboYQiJn
BRBBqixtEIme4m9icKNnPCtF15F+sIzsW+v1r8C4medkmbyuMBCmRLCYnurF/NV4
f4rb6pmU2puvLEGHxXzOAG3iZqke08tXnr0cHTkLe9eA4cZasaLIeIs4ONpcRyw=
=K2xk
-----END PGP SIGNATURE-----