This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-vanilla-12.1-squeeze-amd64-openstack.tar.gz.sig gpg: Signature made Tue Jun 4 16:56:07 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 2ffe475496c3df60cff43b8c8d7000e5ed80351f * md5sum e433699b4a0eb1d490b6756baf363356 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrhweAAoJEIXCXpWhbrlNZ6AIALvvPH5jecjme583ngz6XTwO NMsK5pNA38arfbQKau7iLdmFK37+qv3+ziQ/UFWwQPZWErvEJsfPZeW2SuuzcGL9 ZIOdcFy/5T2c6l2zlC8T4oNf4Q44hRJfBOSilDe1lZ78RJxf3ij4waHzXF1nwtls 6ILDL4+Tbxx8dpIEeGkJmlqGlvo9uhuvCOeB9ZMcb/Y7V8xqOCtyoAYahRTMc9gw BC1ZtSlMtgjpSmZxLMS3jYhcSLGADtYEZZxsfcf6tzEqljbnhfRG7jFmovT6n8ll Kx6sB2PowlVKi+tjokblBt8JEm6AinuEONZ6HNG7C/PuoWu66W495XKVbo9Z97Y= =1tM5 -----END PGP SIGNATURE-----