-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-openvpn-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-openvpn-16.0-buster-amd64.iso
      218b47d268ba8f1c4e6e89013b9882cb293195c6a45133328e240e5072347b60  turnkey-openvpn-16.0-buster-amd64.iso

    $ sha512sum turnkey-openvpn-16.0-buster-amd64.iso
      dc1ca0dd6574bef6c2f451a781751a4ccc0fc0ad65d7927db31b281d3424a310f4150274d2a9a59b41b4950e7b30f7adbc74e869acf1ff89dde8815b32f08d2d  turnkey-openvpn-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-openvpn-16.0-buster-amd64.iso.hash
      turnkey-openvpn-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-openvpn-16.0-buster-amd64.iso.hash
      turnkey-openvpn-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----
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=va1s
-----END PGP SIGNATURE-----