This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-zurmo_12.1-1_amd64.tar.gz.sig gpg: Signature made Tue Jun 4 17:11:12 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum e919359ea1900facd02ab89eb47454250612633b * md5sum 3991b2d73af3e2e5a40edcf40a91d47c You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrh+qAAoJEIXCXpWhbrlNcP0H+wa+l8GSNrV9UTv9pk9sTKi9 DM4TzNQieubikOFzNVvZTMIK8RpsQYuSqlm4xsJChX3xV7WSwoC/hCXeChNHHvTW dvD8wURsXTQipVj5uN9WI7H0gU6Y63pn8MlPkcVd04r0EZH1tjY2NvbXNYWTm1ca HTdPRh/4m6EHUVa1TEZKgjuS0vhjLSMAbstEpUmQxGxiILJHSm1R9NOSHPHqv5a5 KTwMEN6ni0FiNBGvg1hB9p4Lzfs3S5Zh2Mm8sS56dlX3hEGyEJLPvA2hcG8wSFso Dtqr3Xv9ZyTZ0jNJjyVJuCHICvMfSZwBSbQpS2cOCoE4si9WY1acsW7wJSH6d90= =fgIw -----END PGP SIGNATURE-----