This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-cakephp-12.1-squeeze-i386-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 19:56:55 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 1b0e04126c2d40fef9ce3e291756e0f22e650b6b * md5sum bf82661150ff7ae4a27c920824f09252 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrkZ8AAoJEIXCXpWhbrlNU1wIAI14sp7RIz7QXq2kfXzBCvrH fhlkVWq5XDkCqyS/B/ipFeuUykvLrfUw21mW36DujexH64cgxBA6z9TInpBLhjj1 +SU86+Q2yXHxRURz2L5Hs2hMjMj4o6CmI0lE96FiGyK4Cj+LDOOsP8wNxvj0yp/H 977C23zB0GHMq/ruXT/441PWVIgxI2nfNo5/m/RxWDuT9oZ/ZeNBMmLXzwezrL/k eL/AjAwYju57ataIiY3oTCtz81vrBfm2/5iNONERD+YNp3mu8ooXcvdevYtC860K 00S7JxYgM+V7CR+Zv6Ha8L8zVX2g5hEM1/xMfS3NX4/SKzDJUI8A1QMCutL3jZU= =Qfid -----END PGP SIGNATURE-----