-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Two steps are required to cryptographically verify image integrity.

1. By verifying the integrity of this signature file, you can be sure that
   the checksums included in this file are valid.

    $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-lapp-14.1-jessie-amd64-vmdk.zip.sig
      gpg: Good signature from "Turnkey Linux Release Key"

2. By calculating the image checksum and validating the hashed value is the
   same as listed below, you can be sure the image was not corrupted in
   transit or tampered with.

    $ md5sum turnkey-lapp-14.1-jessie-amd64-vmdk.zip
      34accc6357bb2029623c006c39fd3853

    $ sha1sum turnkey-lapp-14.1-jessie-amd64-vmdk.zip
      9733cb8a1dca8827a026549c9006e4b61016f7a4

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBAgAGBQJXDJn0AAoJEIXCXpWhbrlNPvoIALyjM+hW5S3vCEPUYj7UvNrk
m3lUrNJMnD9ruH8k6hyd9bQjzTxXLhiVH8MTmf3m1XPjg6ZWxKwXK905nZK6kCVX
Iahbqn+E3KTrWn1IDFdrXM48pwPbpmabY7o5kbacVEyXkbotXhEfQXj8+EMJqfgA
dKF71cSPaNcpXkFMVUxHBH38wnzUiCtLRM5MDbAJeUTgnMCNFCH1Ks63iuY9oVRF
6vtmHHihQ2K7j6AoC1JZwL1GfktLgXW/Qtu+vq+9GK3Kv9XAP1TTtQC26idbCOvU
zJscuj9Xo0KC0HGMf5BBWeErN4vwXYzT7RqwulpOygBWQx7EyJpC/FUf4rx64cA=
=nPq/
-----END PGP SIGNATURE-----