This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-twiki-12.1-squeeze-i386.iso.sig gpg: Signature made Thu Apr 18 17:03:39 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum c1176917042450f6245f85f81e93532fd876cabc * md5sum 7525176158dcb5d640ae2778da511f9e You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRcCdjAAoJEIXCXpWhbrlNstAH/3pjjCBokWOS3DdRsQYWQHnP cCWj8idozxNi/allE6tOENJS2ABy3wiT7/j69c7ju6YrY/n4JWtvlAl9kq9cBXKD Ip2kyVR5G6pA5TDqPGFOfjrsjpMC4RbQvT0+ArRZBwUlyP+LwDSeTgiXDuAwOzB4 WTnN1UT1lntehj+PoRbBJUncuLLX0evjEkUYfe/XRNU8f5vmFeuUuNsE66KPbmCg zmbWzRhgyFeVM8lmB/tVjiBYrtHPgp3ztyW5njvUUmGw6Qgwun08/MZxIATnT8FH d7broBbF0xMxby5WZ1nT+wdbTaiDV2Al+YqEJMy4xPmvvbKDJ5SfsshF0Of46l8= =le6p -----END PGP SIGNATURE-----