This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-movabletype-13.0-wheezy-i386-ovf.zip.sig gpg: Signature made Tue Oct 15 17:01:36 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum f837d69a170f181686a4821cb62ccaa5b3ad34dd * md5sum 78a16bd53dc6f1fbfb64e95e69245823 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXXTkAAoJEIXCXpWhbrlNHHYIAM8lvt72Fi17txMQZ8UvAyK3 AJlmNpHfLLIrk6leW4piTLjpPPw7HfXEW5jahFK7YGnO/Kk+RKutP38yMTbRkwQn jAYFl2iEGkkOZEcQx+1dUdFM0YO5TUem6YjGfyN/WXQQVh3+1byYRibrmKHHaDqi 9ZpdNpX2JmOrZfMTkKUqY+d8i7sj5zRtglyY7gLA3ERPfh4l8oMcGyDvcgaoDa09 B5C37tBpbZhg9pKarf5D0ffeZraLMN3HAo/2pLTyBx0N670FFjAjgey74zjywQhx J4lPA9Ud0lmV5YtOcchm1elvoSB8j0jwwIu5ejh6/sWw6Tq0u8khxPux59WQB/M= =18FX -----END PGP SIGNATURE-----