This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-domain-controller_13.0-1_i386.tar.gz.sig gpg: Signature made Tue Oct 15 15:40:46 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 7677fba2c116529752a8c5a7c8f116d2ea4bcbfc * md5sum 7d4eea82a3a0f3355dfdc3ec919bc785 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXWH2AAoJEIXCXpWhbrlNdpkH/2QlObqmA+8F2HKpYPiB8vgo 4UCEwIUE0un4ZFIVYaYBqoWnCUzVb/8CQbQ0drv5cQ0hhZM5FhTYztpMwIu0FAyk VrxFkJsARHbbdo1zdwoZ2ck/wMgcVAhAjVAVeKtnWq3SYUaccC6zw5+lPOeekPoe IsbNl/ScNDbI99GqYwwmpm4YAVNcuXSLeQoVYppZ185xh76H9Bizx9C+uY9hkkux AHXdtySeUAJNpTWVBGMt3TNMA/Xo2gbJa4devA2kKkuPLaa2VonNvgtnRjDe+cyU Z5uDGIJ2vhuw9lzvS164GcY64ekLxbBCBcmyYJGQMtV0yf5G1BlB7FqJkgH8cG8= =Mks0 -----END PGP SIGNATURE-----