-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org
      pub   rsa4096 2020-02-05 [SC] [expires: 2040-01-31]
            A8B2 EF42 8781 9B03 D351  6CCA 7623 1C20 425E 9772
      uid           [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) <release-buster-images@turnkeylinux.org>
      sub   rsa4096 2020-02-05 [S] [expires: 2040-01-31]
      
    $ gpg --verify turnkey-ushahidi-16.0-buster-amd64.iso.hash
      gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772
      gpg: Good signature from "0"

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-ushahidi-16.0-buster-amd64.iso
      a096149e5466845716be0cd9cc5a9048c55964d6f23e8a028eb5e2b1e1dd0567  turnkey-ushahidi-16.0-buster-amd64.iso

    $ sha512sum turnkey-ushahidi-16.0-buster-amd64.iso
      ccf99cffdb6a990b886e0c2925386889bd022be47048fb4acff94544401bb3094be559d06db36e463592872cf5293f344fe70ad77e47fc6ca8287f43344118d0  turnkey-ushahidi-16.0-buster-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-ushahidi-16.0-buster-amd64.iso.hash
      turnkey-ushahidi-16.0-buster-amd64.iso: OK

    $ sha512sum -c turnkey-ushahidi-16.0-buster-amd64.iso.hash
      turnkey-ushahidi-16.0-buster-amd64.iso: OK

    Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted.

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAl9LYOoACgkQrF6wBJPl
vBw36Q/8DTiiZ7tmPaTPimt8Kfh3QiBx3yrmbDUIyhY5uhCjCZH5g01Q1HlomHdE
rUnFm1DWp/4qiRfcdTpewoY1mZMpAy4DQApmiJRiZ68OPDnwiosaWSVL0RmcRlQG
JsAjCEDQRAxvuAnkMhdyPYXRZH4VKxYs3bhU+ab6AJpU7NjsNvqb7X4NzwH5anvr
sI14gq95n9/K3QetRjfgVDw0wQWahns9OHQucdvpbPs9xJ8VSweh/zGS2GmXCbUC
QEsZjmQvv/4I/h5EziWqk+g1+U+RjTPcJPziM4iOdEhnV2DhvFEwIVspKUX3DGGg
Hh1fbeav8UummCthXjLmrma6FeE8kCyf16cJkHOWOYpQbxy/FA71VBHaYVigzsIq
LZmDeDk3Mh38eQqJvDP4JduPuCtUMhT9wiaAMyoS1oK8ebB6Q5BG0owZBz+tlUKw
gMRSGr5G/c7qcgFsTgOWTTZiBOAYF4GeiO1DKYg9NAj7M5FNeM3C23j9ZfbsXrp/
QRyjI3Y9QYX8g0LHt+fGf53G8pJ+2sq/iNcf16zofCIuQYFyxYGG+JJloTGYlB0i
FNXmnapddFcEvgOSuGqCnE0G6gv6G/xoFua5HVHkLtvlyHIkPMUqZks0eKiECuIR
t0Dus+dVqgdTFvaxHx8VBT2+LpEk57c/UDvdOa5+YzhuOBOflKs=
=BJeB
-----END PGP SIGNATURE-----