-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-observium-14.2-jessie-amd64.ova.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-observium-14.2-jessie-amd64.ova
      6e17baa478eee6aa36c5a7c85a1f7de3975ccae607cea658973a57d1544c5977  turnkey-observium-14.2-jessie-amd64.ova

    $ sha512sum turnkey-observium-14.2-jessie-amd64.ova
      7a591b72bdd011f07e80ae0405312904742533f33b1897b8b3fc0eec972f1d3d7adc551d9123c7a26fbd91375c3adb18f2100d205aedef30c2ab0c14f2892162  turnkey-observium-14.2-jessie-amd64.ova

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-observium-14.2-jessie-amd64.ova.hash
      turnkey-observium-14.2-jessie-amd64.ova: OK

    $ sha512sum -c turnkey-observium-14.2-jessie-amd64.ova.hash
      turnkey-observium-14.2-jessie-amd64.ova: OK

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJZNo92AAoJEIXCXpWhbrlNa2wH/j/ehjN5262cd4qDamolWkRh
C34muW8H6ycWvOPDYy9wRnwEbWkqvFV68O/JGwNyFPZFyZduMlUPST0RMgxBngDU
N0BmWmuIix2B42OTKBoILwhyosP4HYLVJxW3gfuxSvA0Mn9NeKsB2zD0tfrz4uw5
h8Q+O7G+y1IYLfbe4M3omBTISuQS7t5D+S7Bkr+GVAH1X3w7kxS11zY+iH23fhBx
v/EVYEyeMzSmfP52IXwoMOmx1HFAXk74dc2L5x1UD4QyP3bjalHNlk6S2NRs5PmJ
t89T9Sv7k63bpEOAqkgySeV+LGjBeaW9EYh9uua/mkTK7tfRiMuR2DcXOelXGSE=
=55tL
-----END PGP SIGNATURE-----