-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two steps are required to cryptographically verify image integrity. 1. By verifying the integrity of this signature file, you can be sure that the checksums included in this file are valid. $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-odoo-14.1-jessie-amd64-vmdk.zip.sig gpg: Good signature from "Turnkey Linux Release Key" 2. By calculating the image checksum and validating the hashed value is the same as listed below, you can be sure the image was not corrupted in transit or tampered with. $ md5sum turnkey-odoo-14.1-jessie-amd64-vmdk.zip 5d09aae2bc625b1f256adf3456ea93b1 $ sha1sum turnkey-odoo-14.1-jessie-amd64-vmdk.zip 244927921dad35e1cefbf94e7b5cfba52928d208 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJXDJn2AAoJEIXCXpWhbrlNaz0H/3Mpv0BV/ZUsDCqX6HSR0+K8 gR97JC67+Jg4VfD97lQJ6tMkqSr2rU1wzV1Vk3ovCH2AOxWI4OHI9WCmMWv7x8h1 jVAMIPzHi2/u7CFMLdk7otJpy+/wTLHYwa1NtrSj3oaG50tnR+4N6iC1VV0ajyph dfUJxMGjqxzQ9IHKbXvTcKE4kFQyfBFJ4Hr0K2+CFDiF5Y8aHamQIe3IxuWH2rWm P8NdwTwAmVn4JFaLbgdAbHxB4lYTQ37CBpRFWEHPG4KGJwZ8777TZTYm0tnS8wFN Qw5JVxBd4o9lvdUVOknWF4WGMiwLvRqfBu/TgEJ+gEqgbXsZDOCV2+NL+lIynRU= =b3g/ -----END PGP SIGNATURE-----