-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Two steps are required to cryptographically verify image integrity.

1. By verifying the integrity of this signature file, you can be sure that
   the checksums included in this file are valid.

    $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-8-turnkey-observium_14.0-1_amd64.ova.sig
      gpg: Good signature from "Turnkey Linux Release Key"

2. By calculating the image checksum and validating the hashed value is the
   same as listed below, you can be sure the image was not corrupted in
   transit or tampered with.

    $ md5sum debian-8-turnkey-observium_14.0-1_amd64.ova
      0b41ce77cf6fdc58ef475389ff9eb40d

    $ sha1sum debian-8-turnkey-observium_14.0-1_amd64.ova
      1456ab6d5d50b45f5c6e2ba0a6b35240b63668c1

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBAgAGBQJWObxUAAoJEIXCXpWhbrlNsC8H+QHTu6GNJzw9abeHoPzIG9OU
7GOs5CZ0ZXuT1UmVZdfQnK6HEzodcVtDt7X2xFJMQwFma1pYlywv+LXnZBuGZmTD
1J2W1ltzTce8v4Cv72Bpx7vKYM0uluhQObbciKbM8xG98qhPIntv0Gvyzjnymhyf
iG4ElBqwzOyb6eLR9zewdOcoU3Iwk3yMaBOOquwniwyf6Zhsclt3JKj5pPBrOlyA
u3DPpOh/H/ijquPuAYFMWkHZrrXduZ1S1wol1cOyjHzmKbZljixjdkOkpDuyfVxm
AxnlI8KCD1d0wzDdsUCSsJm/VQy+mAf5YUpYBdRmBy3oPILKZWrGtVfXzEsrFGM=
=qdUS
-----END PGP SIGNATURE-----