This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-6-turnkey-joomla15_12.1-1_i386.tar.gz.sig gpg: Signature made Tue Jun 4 21:24:02 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum d4aa6865c606f44ed7af1b49b71845fbdd2e0a56 * md5sum 7a713bb085434ec8c3713dd9317e1704 You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAABAgAGBQJRrlrqAAoJEIXCXpWhbrlNjh8IAJ7PfpoeSvSS674gx6ok4A2w PhBWby9WwEXy5dYCF1Ude6jS5RSlZIxIGV6jnhHRSL5LAiF5sXFRb2YvYFtPOT4/ YvaMzuLwPMK0gBqhgaLjX5U/ALGvlH3pY9tT/gXWG0r2qkPWADTUqpEb4SWellQq sHP7bvwwFbTS2dCHbExxbcq1BY8cWlugpe6bBmcFftkrtiy54iFMemLlOznIawso fMxkD4h+Acx5M4w1S99aFC5EtiSHKSTdeEUgkss05vOznq7QwGfimJoEdDq34ICY isZjLGRAdlwz+Ho3s/eODp+UkPoNcjcv/0oDgv/lMQR4DS73Q5k/GUEXt3OatmY= =3M/3 -----END PGP SIGNATURE-----