This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-tkldev-13.0-wheezy-amd64.iso.sig gpg: Signature made Tue Oct 15 16:51:38 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 588ef6b4faa9f86eff2d09c9287b31e75109c3b3 * md5sum 85ac3a425a2418441f3eef3a0d4afecb You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXXKSAAoJEIXCXpWhbrlNPRYH/RPaCfd9PBdgPft4sPO27ziN 4RXO4KbJVOHTog7G6G9cPygzu4LsrnizjEqPepsxhysf70NMBSrQ5P1uPh/WzMTa PbYkqbkMLx+k3uYOAdYbhczLx+Wjbhrvdyjse8HKCNMiWIGobC712ub7V16JS2Ax KWdw2ivBcu/53eb4g1dXBFdzdk0ifevcnM+mv1q2xZpdsvyk+b2OM7PX10keRUZY Q0ufamIgXUuMTrMnaRw042dahjU7vpI4Ohzz/eFvcZSGUjGrSUQ90Uam6dW2EN6z U/ysZWEMn7/O766U2pfNx4C0tJMKukdsEvgteHC16gT3mfsfBjCSUa7nRlvw01Y= =+f0R -----END PGP SIGNATURE-----