This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-sahana-eden-12.1-squeeze-amd64-ovf.zip.sig gpg: Signature made Tue Jun 4 15:55:34 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 075ec13cc4ab8d1061448c058966c35c89c24011 * md5sum 17327d675df55028132c9f268402c6fc You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrg3qAAoJEIXCXpWhbrlNuoQIAL4LYKdlUSSOPrb6GR7zVXlH OrAvQ/AqV1eNBbTAdJ4l4WqOXlvXA9SIlDCqUg8DRc9yVWA0U7ZS5A7ZpnvyDTu+ W8Si3rzaKI1veuyU4CfPMPoe1BTqBGvLEjdTQbgFCnUar0gLuWrkqvfm+lujJt3+ yG5yUCxABnGQ9aU3E1mdegreWqqqPL3ZjJiT0GaOmCEmk2UPM7Zt1XAKJlc+ojvy l1Qkr3r5SbZbtxuaPgplbHL+w1TVK6z1wLSIVR0WiuiBOEKTqG/h4NU0jKV9l8Ln ybwoEn/5+BORJ2U/r5iqVw7czraX/tfOewx5ndVoF8KQ21tPBAYT9XCtb2Es6Uo= =1pWU -----END PGP SIGNATURE-----