-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Two steps are required to cryptographically verify image integrity. 1. By verifying the integrity of this signature file, you can be sure that the checksums included in this file are valid. $ gpg --keyserver hkp://pool.sks-keyservers.net --recv-keys 0xA16EB94D $ gpg --list-keys 0xA16EB94D pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] uid Turnkey Linux Release Key $ gpg --verify turnkey-prestashop-14.0-jessie-amd64.iso.sig gpg: Good signature from "Turnkey Linux Release Key" 2. By calculating the image checksum and validating the hashed value is the same as listed below, you can be sure the image was not corrupted in transit or tampered with. $ md5sum turnkey-prestashop-14.0-jessie-amd64.iso 82a3e313b2a2bdf3be4ac1adb31272a3 $ sha1sum turnkey-prestashop-14.0-jessie-amd64.iso e1698e09f65b7fadf8d6db908d3c2da1601b096b -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEbBAEBAgAGBQJV7BrqAAoJEIXCXpWhbrlNGiMH9A7129IA4kohqB4HMHxRsmJh 5ePI0FDImhmirmc16DRxoI1V/jB1o/CG6xQxOwVgl+ho1CZImJjHEaC1Mdt0CqZZ o/y5Mv6LXnxvzzzYyL/m3y+sL8JIHnJoH2ODDVvkOv8PESmUJqJqFpUMIjiraGMv krQe2DadFOTKmsXLH/kW5SfY9r0nIKBDonzjYOj282tzoU4QMGkjg0p4WKxdk5lc bsQYM0yTB/ni/jcRsUBboYdib18Yny/p5YbJNmMrjMSDaauZLRi8KY2zGN4ddaHt yM6+5B2NZlA8JwJZWD8+paLEIscdjRRFBIBGW1XS4CF6rb5tWFPNNKAguwIuRw== =uBFD -----END PGP SIGNATURE-----