-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-bagisto-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-bagisto-19.0-trixie-amd64.iso ac775d26c0ddadea998b00d085fb92827e441058be550d70c30bde11e66e986c turnkey-bagisto-19.0-trixie-amd64.iso $ sha512sum turnkey-bagisto-19.0-trixie-amd64.iso a333801157e464048f71b3e947d586957a1eda3dc46bbef5412605022ee1378aafb4c71934c007dfdd2fdf876d601af4acd730085c5801d0562ebedf2e891aff turnkey-bagisto-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-bagisto-19.0-trixie-amd64.iso.hash turnkey-bagisto-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-bagisto-19.0-trixie-amd64.iso.hash turnkey-bagisto-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYi/gACgkQ2fx1wp0K AzuRLw//Z8jaMGfKH0S8yLZ7gaXq6WZzhJD2FBn+mRUyu5kSrNgrzW0cNQ92A5EN 6KsyZymqrfYW4Sva/v/XmnRRRFfQdfzn++P6lgYS62MZ9KVkrQo0Zt2nyEIFpSeM MH1C/dnv9wSDmxQrhrrngJ6F3oaus2IiWMif8QBVFswImUEgaHcvf0/ODvZ5yMAr 4cMoAti3I1OiSmIEJDPSz0mSuUMiORfS4zEj8dEiwnfWxNiAoVmRO2UY1HGYP5RX uNtVNE/hzSBkLLOq2IISFm6W46P4bsJnyqFPYwBzJ6mg40NYJXVxhcx3wF2T4ztl ekRtQGB0ksDNMhu0M5jAhEKlPZ5vfiebEAElxgyY0S0dAlKa1k7HIpgfm64mzON1 ydpPxLrDIowqlDeX3ScTb5B+Bkv7E0G2rU3bo4Gk8WR0vhaQjQTWTm3DGVJvczv0 BJywbeSehXhyTczxlTpgAMxxSOF3hnkokHil0yHD3s5+BFwrXe/b53cBnCW7j/lH hvVDoZ6zq89FVWmhXFst01YEJdYVWYbBd39GWOOtsaFbUGQx4Xce/4z+EJsUl4lU RIYuSlJwyu55D3AzSGJahJdnwESCw2Vl/rBqfnVCiqBcsLGbx8Eh8xfjqKBqKAJT TD3vxQFkXxPBRyX0chvqHM8u2zWdhyAsk6hY+PL9IoB6vIJDp+g= =ZnE1 -----END PGP SIGNATURE-----