This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-limesurvey-13.0-wheezy-i386-openstack.tar.gz.sig gpg: Signature made Tue Oct 15 16:43:29 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 19807b37b87438ed2d6d8ef844ffd5bd83c421f5 * md5sum cb73d0124502aaf5f4e139f9734d5070 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXXCnAAoJEIXCXpWhbrlNZpQH/jCOvACYHBOLQyxlIWHXp3lj CZzzofTCHwppWm1rZtmugIZPs4jcSM+oz6LG10KXS7RB4x90+B8XsWWOuelqcRaz 0Rsiegf4x2weTYIsSyqM47dUmkSK4nljlnO3HR5Ot+3pghkIs4f7JvdE9FU7rBhB +l1OGaR5g9+IMW9UT4Z7gJBiz4yX7wwRhoGJQcLfFD85aZMHAcRO+tqRSHLixDpz 2zbK4rib/G23vBxUcge5+LNZzUH3gUVDcGsREhqA/NASFbASZ7OLVLzKw1Co2fa9 oNjAS8CgytlZL4wm5dG62x8yyurvV+FOCiBsakefdHZ9SQVuHiFk4/UkLaCddw4= =9qfy -----END PGP SIGNATURE-----