This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-symfony-12.0-squeeze-x86.iso.sig gpg: Signature made Sat Aug 18 18:12:33 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 0dc5c9447c6481603f5c340ba916fa39e01d3c42 * md5sum af9eed09466400087f8276ae55e23f41 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQL9sFAAoJEIXCXpWhbrlNrp0H/3OdxUUszfl8G9snh7+sFeK2 GEEdcXgN8NYra8zJlLcIJUV3rBPDDVvW3TicbNq0uvH1hO3fKb8wZKNVg/f6deSC QyCK0M9sa6THpvgeUco5irUDgWXBpq7Qo+64OlUV1YQz/AhyCtaG6pfYw63aGF7J dUa6v2OCu4wZQYzF1CUbn/Y09FUClbljIAI9qYBITnEIVt66hbbha3Zw1gDWOUw4 V6hNptt99nR/Tmc+YOCAemSBBNdQjyOn8YAcNiPMbEmHsUblumUtTLhuqXOFgMZl XmUszCBjmIE8l1ZB4FJhYEIL31FpSuMAPlj5cfwI3T9AdfWUFKsRp9KRXDgKmlQ= =s+nn -----END PGP SIGNATURE-----