This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-zurmo_13.0-1_i386.tar.gz.sig gpg: Signature made Tue Oct 15 20:33:12 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 2f447ce94484f70b1e0a30be4e78ee0123e241f4 * md5sum 40d8d86324a3bdf018d963fb29a471e3 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXaaAAAoJEIXCXpWhbrlNH94IALzCrt2U8GCQqPWG71/8bgUv vgi5qT9EOO3E6aP0O9Z+UEyk+pmPzRQitdehkVv5PzByQ/ZiX0ULKeqByGrHHLWF uTES1gXRcnfDuLU8hCtNvHTvfmtH2cr8a/aI86LmFkmEElqKcI6TTMeiK7fQDHk7 Ll1LEfwye19bnmsqFPRd0aRXtJiSFFPLr/o9jF8v4t14SizMAa6loZ7I8PSBlO95 wvP6nQPYPjXZa9jgxy57YnvUM8hFpE1vUI4KeQPDsW+pSG4abMRUhrgfEghxnwo5 +veOoZKx6GoOMCr/ZMDt/JodsPJbr+qY5ycKV7Ch2GsFvyZ5CFGCjcK6duX/JvE= =fTZj -----END PGP SIGNATURE-----