This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-revision-control_13.0-1_amd64.tar.gz.sig gpg: Signature made Wed Oct 16 10:08:10 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 205b5149dff17e718390a019dcbf8591bc966469 * md5sum 7c07eb0be93172f21978e168f1a8a421 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXmWDAAoJEIXCXpWhbrlN9OwH/2t5nNBjPXpfIva4JZjYWiUU WvnN00jYgOJb2kvxVVt11W3R9MbGDORZWlz/luuYlLzjPw0ct+6nq8nuUSFVKpNu v9wK/N1Ilgz+pUjY/Yaq5maIly++g17Foz6mNQFZwPZlLEmI/MqnYS2e3CQoJIFJ 7O6o57W+2U00aG3xGzmHWZaiZRNfAJjwKY/BIR0LybTY968L9DxpiiR2i2BUsg+l FSEpO3yDIlM7dIyiqh5v3K+yRnM+jSc5eegu+ZjKK7qNcJCtwlsEQ8w1ICzwi8hf k5FgBTdVxmRB/IzFr6f3AkWorOvl1UbO3H8rF7LeqES+7zsxnMN9zgQn3kX7klc= =oEiS -----END PGP SIGNATURE-----