This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-movabletype-12.0-squeeze-x86.iso.sig gpg: Signature made Sat Aug 18 18:03:05 UTC 2012 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key For your convenience we also include file checksums: * sha1sum 9aa65a9c0e409b09c49622dee6f064c3d1c512b6 * md5sum 30216f3de68649a67e8168311bd45cf0 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJQL9jPAAoJEIXCXpWhbrlNnAsH/1W0cR8jWurBvlV2AggT9bOs HozsR5tkqDtFEPM3DWxbzYh1X0oaVZnA+uWCcKTl40hFNAvRtcomWfFU0YO/g8D7 gw1NxfHtAhxQflt2G+2tao7Q6LuS3C9LcRDz0FYQNE3V/BR89su0GfhXUufU8Jxl O0tbLdqx+z7ELiRI/UyYruMFVOVPUDe11Vm3xfDKX80yRKg7utRivzrwoVBpUZ5B GdAxnyIeDqYqlsASii9rRME8HnoG2nwELyyAd4nRmPn6OILPav/kpQo2Dn+xTbKq EWvNjQIhTB7FPuD5Fu2Cj/P0yxMwTrEgn9V6k9i2azuKwWolUX1QzD0oY/ncMyY= =vWyg -----END PGP SIGNATURE-----