-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two steps are required to cryptographically verify image integrity. 1. By verifying the integrity of this signature file, you can be sure that the checksums included in this file are valid. $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-etherpad-14.0-jessie-amd64.ova.sig gpg: Good signature from "Turnkey Linux Release Key" 2. By calculating the image checksum and validating the hashed value is the same as listed below, you can be sure the image was not corrupted in transit or tampered with. $ md5sum turnkey-etherpad-14.0-jessie-amd64.ova 00dcf2f70e8b2f3478081311d0aa3672 $ sha1sum turnkey-etherpad-14.0-jessie-amd64.ova d57e7635d896b5c0bd0af61d447670e6b97f3fb6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJWMJdWAAoJEIXCXpWhbrlN2woIAMfSjkwG4h6mYlRQoEdpEZe7 5+HNNFj4jqQ0qZJE5Kn+Q7suHYsesi2HYZhSB3K5+jxN7fJWfb8noU3B7xJMopDd emaC20GQnrAeixOOrnT0wsAcvrRHSrpFatuv/aonHpF/fZHyU83E1dMnHvc9e79I klTkvDU/qdPynpYjiVHgTOByh4dZSLve4952qdG0BvwHMxSqddcr4v2l7bxLBYjm GBYQ+IqaxP8znAaJjJLMiViA1fFwY4PLUwt+hfMuZV9mmU01hB6w5CrVmLVCSdMo ECWImHJw6TsKKcEuqrFhJ22SkyoxOxuInSR1MPFW/LtRxqb8YG8f8pcgpryVau8= =1dni -----END PGP SIGNATURE-----