-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-asp-net-core-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-asp-net-core-19.0-trixie-amd64.iso 1df16e250d7faec104377d5e7bc328e87ab764764f0844d64f703ae2fcd24b41 turnkey-asp-net-core-19.0-trixie-amd64.iso $ sha512sum turnkey-asp-net-core-19.0-trixie-amd64.iso 257172780431ebcf0ad6cf37c7ed27612554466909b902ccc882d7e11d0a5dde1ebe857ce31b28734b71a1c4e346c1e7860116859088b52c4d11d8d8eb27a8f4 turnkey-asp-net-core-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-asp-net-core-19.0-trixie-amd64.iso.hash turnkey-asp-net-core-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-asp-net-core-19.0-trixie-amd64.iso.hash turnkey-asp-net-core-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYi/cACgkQ2fx1wp0K AztpBw//YujtR39oeLHBykM3pwvHcWryHiPgTbwriFlI4A1qx97NTxuMvC2iNBXl 5oYOVHI52YkXXDJWzFS6kvUOgph/PrjFOd5Q+gGOjN9PM3h/wyoMMcNHPHXwYZdU UkQ1NmCp7lq2dSjpXsz/gwOps0Yk8uGl+B52j+4F0Lwz5FCYawTFp9J+uLBiPLKm i0vGkDjSqq7mirEzRX5ovaz7Hm03+b2tr2BWYbxahCCaTCVt6zvvKbFLYlQbbvFF tFm4cWb0zzr39dPdzM78INkI0sBoOevlnEow10Mp7mSyXBvJmeGxRF2hSCD1bK6A PQaSsyISfUOtdsRu6nSzUv8K42mr0oQYvNeDVtq5p+NE+SEz0YZItx+LDVHNdKKK jFt0dgrwwx5ge+2picgdm9xnEM4uTSS6p/DQtCwt5ARNcEZgBrs2E1bpO2c6x2un PIr1hudPwAUoP8cB1vHNujuv9qubf/MYzuQky6VAmPQi0qHAWdjg/8G4yyinlZ9n rXwh1R4NO+3/PMiU7eMezwPzD5rZ09fJlkE26wQD3AdBpJP4IevCLftQhNl4IxMB T2j2a8W3lcycsIi14aa2Iih9uXoE2j1gSj+CeE1LH9ST4CyAx5kTnFutWx/TWpot KorPm3+MqMa9J2JavdEQ5TRXD8XkJonjYm3YuMKyB/pHwDrNVzU= =bgDf -----END PGP SIGNATURE-----