This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-movabletype_13.0-1_i386.tar.gz.sig gpg: Signature made Tue Oct 15 17:05:59 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 9a97d45240ec77904e7d43fb57bb90f102629fb5 * md5sum 0c9984c5890f03bbd909cc0c004342a7 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXXXvAAoJEIXCXpWhbrlNwXkIAMaMasKv+gZkAd8Zb+jau74L R6Cpq5qs4L6cNO3HAtU8lnkpgL8Sec0KrMRJ0/979VOE3mj+O9NS3w+NvhuH6Te5 /KyPU2yzbAppwQN3H2YNG5ycTMSf+wRXvbIVYwEenS/ZD7kd+rN5kzznFWvX+A95 MiNlOq4gFF98ePNQaI9NswsIA0ptIJSfXdinGymv6TiJkJbmoE2kmOSoba0UD9hE 5woPT2q/qbxYsdfo8bsLl48IS+tp5wOW0DOMmkv2TpJOxIbRzUMk9cgXZonfXdzq 8QcC7j/RyEnCydh8NSGchd7TDmOSNc/C8YU0EG6ArgYpzgZGWE/Mj3EiCVFQtHM= =IzsY -----END PGP SIGNATURE-----