This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-openvpn-13.0-wheezy-amd64-openstack.tar.gz.sig gpg: Signature made Wed Oct 16 09:34:50 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 87fad88799a6cad0a36036c7b0db3ab59a7c735d * md5sum 7e75cc82acb4e501c9128009c145f800 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXl20AAoJEIXCXpWhbrlN+RAH/1iVNKot0wgrPr43r40PKCk0 78ey6/m4mD8jDeI2gSFzMK2tN4docYsINnnC/9OUH/V3GprjEZMAHiBwTNqnNBFV PEDn4Hi2WzBI2B13tgzV+KMHVo9ta6ntG83Fvx8jN1BH2L0mw3NiyOdf+s86535B wRdHNQWfQet5NRFICkXcYUE8Omo9pF+0S/XXOSEQXGJzzzX108WsdlymM6jsUsyn EJrLOsOWQXP2bzPsThukzjLYw7ZOfy+gsQnG+QWKqkN/akjIb6yd4ZI/P2Eb+eLQ 8P8KHl22HMAK5Ol9QmkKI7MDe0/FjNJ+q2AbO9PU4GppjWqs4Ho48ch+Fi61yhk= =Vwwz -----END PGP SIGNATURE-----