This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-mysql_13.0-1_amd64.tar.gz.sig gpg: Signature made Wed Oct 16 09:25:51 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 6194c7d26c6aada219cb64c7f02cfa343543a11d * md5sum 7227000702ed425a840c50911ccb02b7 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXluaAAoJEIXCXpWhbrlNgyoH/3NDzMYKk5FB058w75oC2Eex J4swAbNFGQqW7/0Hq4nVQ2kaIQkeP0hqjWm7jnTJNtZBrZhHOTp4IW0jIKqVEA2S m3+hvcW6UovcYgP3CYBH/OHQgP6hBjRNihgh4pTF4xC+HKhiRBNTUaH8k8pxBQRP Qticw6RLG1oSfTMxK8E11oEFrRcGO+bhP2q21iPYHBgERFNaU9nuUDT8BsC3ILVT P5OEZkNIpA9dQFJ8qeYqrI7IJQzLFU/f0jaEYU0ES8nKCWqE4D7vSakXQqiis+Kx +lUaS9d2BxKipWAoaclLke2Wiq/vMuVrl1JOLwSdo+Vr6vnRxMnyGt53qBMh97M= =rg65 -----END PGP SIGNATURE-----