This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-phplist-13.0-wheezy-amd64-openstack.tar.gz.sig gpg: Signature made Wed Oct 16 09:50:28 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 335fcc1e03bfd70f9175dd249e07a8805bd90239 * md5sum 7bddb76a34610ca4a8deae6d984aa21a You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXmFcAAoJEIXCXpWhbrlNysAH/3HUKiV2BST3nuY9b9t179f2 9XPWpGaMqqk4zGXH0ymmJOM4LlKgJbN95q0QYQYZ6+QlL4cee7w/dufQ68Y6C6Tq eK0SuFu+MVPBWmdpIpn/IVhtfufC1TjcJiqOxkBSwJnKxS/sdtRyriyZttYKmxpD dPir4qCuotqmGIRNHt0FoBUb7zWQb8J1MOKC96hqsL7aK6H4cEQ7FUa+8bBQgRDB /ZJ8v0qRK/pWlTaZdWZZ/WHBPxmmLOgZzrYtDqCzTTcQ311/vvvrG9bXM0ttYxGo JTaIK1GAvBtC9n3WpHLXad/cuZjGQkIvADNczEWOqLtL/0jeo4srZvklQUbtyH0= =1qbX -----END PGP SIGNATURE-----