-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-trac-16.1-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-trac-16.1-buster-amd64.iso
      b9e181e61ba212a71ce3e0b30e548f6a619151732602eeebce12c3529d77c8f1  turnkey-trac-16.1-buster-amd64.iso

    $ sha512sum turnkey-trac-16.1-buster-amd64.iso
      9bc5b2bca0fde9fa9a4a23e2178f76d465f36b02e310ecae4be33c74e2835efd58d9b516090a4f67aacd2dc2bb7d4926fb2840f817c0491ed110eced36a233b1  turnkey-trac-16.1-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-trac-16.1-buster-amd64.iso.hash
      turnkey-trac-16.1-buster-amd64.iso: OK

    $ sha512sum -c turnkey-trac-16.1-buster-amd64.iso.hash
      turnkey-trac-16.1-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmCzProACgkQrF6wBJPl
vBwP6Q//TZXfWraIkrpoBwVecvYt3xc5nq+bZB1nt7/eHXcK1QSwXW5AR7mPa4ge
k1ZyB0/5QNbBcpoR53O6fRXZRhafEKCGd+DbLEe8FOswt5Cg1i113ElZAOODN+ll
CXLaWT91/cT7SSLhjkSYtvojcTvFUjwk0LWH/jkr0rLUYcWNpz2I/u7+bW9u/PPh
r6pRadHaNCHsVo1pK6mx9njYdvBOq/QluVHFL2cGLBewmzRdQja/Ja0jJ9FX2NL6
sijdY8kyUKF/lIUxIg9LcLW19hyzsLrzE3GQSXDfmbgsj7nwqoC6FZiJ4rvoxCRi
D9rCTJYXmDkUwCzpk0+Dmjrdrq4dufdRQPIGeT1ZHqx2EYzNITTic910yqOgFQWC
DJj1MMfl2rgOwnJWYbqx3NpKrugEKipCQC/bzN3BJHv5ZwRUmJOAHIFuLCBdUr6K
Zrp7curD0/w+3jqGi4uvjvw2xoQxYHOUKKpnZDRyKjnx3fiF2su5dzWPdknS5FJn
x8Jm15MWZD/dG+fzY/a+gzU+GyC03JX0eApyOSDvt5EN6EQBwGVt0vN7J87mVuJr
hAnfFijHmr2kkmifD6Gg4nbe2YHR9B9Zq5psYCK02tqOMsWM2iJhxOsKv9wTrQOK
hjp2PRRZTNZQCct2sXIx8Y18n/6oIpojA0u4ZTdtdCAvpj1A7mQ=
=9d4M
-----END PGP SIGNATURE-----