This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-tkldev_12.1-1_i386.tar.gz.sig gpg: Signature made Sun Jul 14 12:32:25 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum c00e5dcedd07ad85cad57b626237994ef1f611c2 * md5sum 29e540315e64a5ff9520d6b99b08668c You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJR4ppSAAoJEIXCXpWhbrlNiw8IAKV2M59Q9DO24OdOJ2ihcrok eAl+5sREe84/G5okvH5cJH1rnAkYi/N0eeCpyGpX6BcHV2bI5HCeJ+oHbDKAYgCy qZ4pPdE6tngjfKSoiG/XjA8rSnnS2GTr8FtXx7ELmRdYM+g9Jv3PNflTMU29Dp+g yKo2XnKNGid4z3jc1ZynTRA5PQOXE8lcUZWMbopSI9evXZfqjXduf5yk21HMdQnp Fbn9mMIR2XfvTNCwByFdTsK1O1psqdihWoIkarWEgrcddzBGzxxUKFPXVctytGHi NIGPQX4zyvHUT/GqNvBrVODsXZsJCAfkJ21XsCcx6kGpyNoq+TojN/9zAQokoYU= =xJIs -----END PGP SIGNATURE-----