-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two steps are required to cryptographically verify image integrity. 1. By verifying the integrity of this signature file, you can be sure that the checksums included in this file are valid. $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-openvpn-14.1-jessie-i386.iso.sig gpg: Good signature from "Turnkey Linux Release Key" 2. By calculating the image checksum and validating the hashed value is the same as listed below, you can be sure the image was not corrupted in transit or tampered with. $ md5sum turnkey-openvpn-14.1-jessie-i386.iso 10c6ab7c2e57ea77233b74aee309db56 $ sha1sum turnkey-openvpn-14.1-jessie-i386.iso f864e2fde3ea2cf37fa7491de44c495b8a326c03 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXCkPzAAoJEIXCXpWhbrlNp6gIAIkK642yqZAME6EhIPJOwsdx 9UsbwLwXGIDqNDUbk2drJ5qgoNY5N+NSRZQBmDciA9xzC5L9jP7t3xUtm8+IDxx7 VRWvacyI3KtAU9Uvf3YiHAeAXdN8Sn+yuoorS2sy4nOmC3aNtGab+fE4+QlNjg9I NcsczQSoHzi/o20wksHyapxZZ68suGF+UsSAy4r9lCyJSDtFaeUHiFiUgW5MoUNU 9Gs3Sf5s8koouP+mKIC4UjKKzjFMBBXQBw+XL1TDyxmxTXnDcibX+CJurecAjwOL X7WXXU+NMd6ABpUJhJgvayk7WiUfkiWrByuE4vcZhZ2G3lETm/VQL1WOFzbRYr4= =Nv9x -----END PGP SIGNATURE-----