This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-lamp-13.0rc2-wheezy-amd64.iso.sig gpg: Signature made Tue Aug 6 13:55:46 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 49b3a78c6a68510dbd9fe30fc380bdeeb7093199 * md5sum a045559e1296ab212b4f9fc2f067e6d3 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSAQBbAAoJEIXCXpWhbrlNiOUH/i/o8aFS6+7kdzMvb3gBZbfW 1Aq+mcHYpIeybw+ZWT6sPCGb9W03BWYcUvZmTVOFEaacyJKOQzZXsIr41WP1axu8 qUPhZ19AQEfD+qLeywaYOLE8cd5Ps/OnhLdHfV+q1AIlW5Fy1VVgNoMNnQPmfwvI Ovst3vdLgc2gUCML/XSWtK3Ps+n6ibmeMWkkKJqX6NI5R0rcQrU2dvo8tdIK74hn BMKMUhIqMHeA9X3tQX2pOrKeN20aVMtleiziqwbmkcoO+L3jW7t0p2m7V73A4rHh 79HwbYSZvEfG9tgJLpoLTzKBnMfkUMvNlBJR1FaQT4uXJQqXrORtY9CjZK49dIs= =0Ak2 -----END PGP SIGNATURE-----