This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-pligg-12.1-squeeze-amd64-xen.tar.bz2.sig gpg: Signature made Tue Jun 4 15:42:17 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum de90356bedf34d005350087fe0ea563e44429ab1 * md5sum 5dffc14a2fbb7c8c6f4bc61b5cabcb19 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrgrTAAoJEIXCXpWhbrlNLRAH/2MBboH+9phcf0Svatiu9wux WSwsAsyIVc4EFHEh7rKDZy/zK5EVmIbAxWOhcGs7l/M2+2YEU1s4zdXDMa0XZkjV dqb0P7HFb/44Siiur8QhaD/FrNaBfQ6dfRU+DTZ80N+qQA3xj5e8KQn0RZ1dBSGP IAaoOSQKLupaFC5/4adqFe6yOcjjy3Xg4KrcwDRaVlTHfBtih+bnXQDZDeurjgQl Db6BFO+yI3bTqhbA0vpsZway4UImOqJ29JqT8kiCbqxDy7YWnSiN2V8FokFz7Mdl OLwKd+dm3Mi2EZQu3TEv3GXDcveRGXYBNdf/2QrW9I7jw+xM2U8m1NJdQNwwChw= =wm3I -----END PGP SIGNATURE-----