This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-omeka-12.1-squeeze-i386-xen.tar.bz2.sig gpg: Signature made Tue Jun 4 22:58:01 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 4eb78fb2450d6b8c800797c8dd4439f11e3e1872 * md5sum e2555c750eb7ca41de9fcc82ba53041c You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrnDwAAoJEIXCXpWhbrlNAg8IAJWo6Nmc3HOlO363vLGVkQPh zI7MDGR+BdDjiyJCNAeqf4yfiN1Y4e98WvfxFoBJBKxxVWqhvf/NajAV5ixYu9HB dEH8i9xi7cPsBdOk47/5H37uQdeegDMYtjyuSaNks/N/8G39Zd4rv35NFYmijxW6 qOIuP6hvRypJa2Pz+3/CFBTv3+sFA4vSGWo54nP76Be/iCO0Hyo548s2/8DskTCs JX8VDnZJrjD0lsyuD0hzQH4BnGC8GK83HN0cZ8DPd5DXqBs01FaR35Om9URoxtrH FpjlnVZzOg3b3dZGlW0Vpb6CsGH2tYpLFY5AduklfOBv6LC7dYMJIWEyN+SfcSc= =1Yv9 -----END PGP SIGNATURE-----