This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
    pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
    uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-phpnuke-12.0-squeeze-x86-vmdk.zip.sig
    gpg: Signature made Tue Aug 21 12:13:10 UTC 2012 using RSA key ID A16EB94D
    gpg: Good signature from "Turnkey Linux Release Key

For your convenience we also include file checksums:

* sha1sum  a1719fb8fe51e3a4a3bec2411852eaa2ce4f9d84
* md5sum   20f25730bdcba3462f7d0d563a1ce0a0

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJQM3tKAAoJEIXCXpWhbrlN8+4H/irvO0Z4HnshO1vcP/aDeWDn
b/VB4oY+/81BCk1fq3lN4aeWwVc4/uqQFRRvCmQR/pupwYeYuLp+xxnxdv1zH2vj
BEqTFpEHGrVK6U7szImK0nWq/UL+9pX4FhEuse5t2v27b521ZoIke5N8KvxZ/Ukb
KeeOgkzkAQPMuq90mTI6crb2j8EreD6aBImQcKkd+ZYMG7YKNubmc5mljSQWepEu
8v7LVG0EUK2q9POBqRqTdMECWWtapgD50YzIJu9ctqBv/8E5B5FL74jj8KAHK7O1
EksgMTpMNhB1y90igCVLK3pRp0uwJi/putMbpz0LOHb1Y9wQPwlgSnG4epM/EVY=
=3UK2
-----END PGP SIGNATURE-----