-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify turnkey-avideo-19.0-trixie-amd64.iso.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-avideo-19.0-trixie-amd64.iso fd683f99726955477cf37cdfcc42b65f2fc57a8eb3b21221c8d1245733f781f5 turnkey-avideo-19.0-trixie-amd64.iso $ sha512sum turnkey-avideo-19.0-trixie-amd64.iso 8a0b679cabcba133d0dac9ffffa2c820a0abf486aadc25765c908f0a3cbbd82a6bb89debcd44ba03132f2685b96cc68f85e52d0da931012b4a2cc70479d3afb4 turnkey-avideo-19.0-trixie-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-avideo-19.0-trixie-amd64.iso.hash turnkey-avideo-19.0-trixie-amd64.iso: OK $ sha512sum -c turnkey-avideo-19.0-trixie-amd64.iso.hash turnkey-avideo-19.0-trixie-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYx1YACgkQ2fx1wp0K Azs2tg/9EgNVjo0cQLo7nGZqM8KoIqFakLN+dg8Xv6rRvgWw6nIPqMcAmfrswAw9 xwD/OOEzl9wJjSSMjynFNPXtMKqYPZV24AmMmSmqMAn/qKvDO73X0MA3Z448q8Vm qUCCee7JRByuCgU1H4Fp7IiozdI3RUbqVLUxjiUwzcP5QirybgAIZIHU10SAcfPz fB6Z8sxuuyxsj1jeGfvHQDpQGNF5AsCOO29liavN5yHgT1dB9C177N8bmnpreux+ YN95hGwsmfsWIcIvq/44ykPlSTVnGH4BUpUkUqVs23vTLJoBOT1t9IuUkeAamK1T QpzDGX8vDyO0VM5xS+UL1jCZi99J8RfG2ebySSCArHS5Z+EcmefLlRgsYga4BT+i JcPM2u0IyohVS88psgNY4lxp4jSD3z95c05Fi2rweI91M43G38IcI45wPZm4/IMP EINE253obLf9TzmVUqA+smJVIKE+R3b3DyR6gk5Cb29wd5lHo89QBSNVFjOi6XBN FtGIfkLbZ8fvJoLWDrJ+QfEm/PzYoWmYc1PKl/KwWfy1yN08cPOzNLHzblgVBvA7 BtmUwrgBnAsyXm+djRd/QrKdYIoELHLcRA7nPQ1BTCJCeTBTpzguv4dOtOIgOXly LtTHWkvgzC/N+MeN3d+KXMNvK6q+EcRlqNtKaues1S/tvl7O9u4= =UpB9 -----END PGP SIGNATURE-----