This signature file may be used to cryptographically verify file integrity, like this:: $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify debian-7-turnkey-mongodb_13.0-1_amd64.tar.gz.sig gpg: Signature made Wed Oct 16 09:27:15 UTC 2013 using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key" For your convenience we also include file checksums: * sha1sum 2705194987ce13480c96a0281afdddbe92233378 * md5sum 495ff2f072c943ee3c5d7bcb6d2b316e You can calculate these on your end and compare to check for errors, but cryptographic verification is recommended for security reasons. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAABAgAGBQJSXlvrAAoJEIXCXpWhbrlNEVUIAMy8ys4JaHv7zjK7KMiULY3N OaJKzQ8iG30IIWExf1hZWaFOPHNoRFbR0ZnRxsebYk4tI0r2HW06aizYy4BjpA/W r4OD9obiE2k2GWpi2fhUjkoigCN99Qn8cogXQja9p2e6ONo1jUAXicLJM7sbIYJA Oz6Uflrg4BnwMV+Z6721CUx8il95K2PUCFvqToiCqnDGe+8P2u6p7+GlaUqDc3vt pXC179fUK2jY1Jf8IZSQd7vMWlLAabRWh+MLj85yEb0NArYLU4xzGUnsN2xHjR6D xyw5oyAze4Jk+nvBPEHrq7zR00HW071K++AmC+HNA9FCx7tPAVDGTLXVtZtTroA= =cA6H -----END PGP SIGNATURE-----