-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-dokuwiki-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-dokuwiki-19.0-trixie-amd64.iso 9a5480cfd339224801a977d3c41f5969e2a4e042a40c5e729f9c5bef67a621f5 turnkey-dokuwiki-19.0-trixie-amd64.iso $ sha512sum turnkey-dokuwiki-19.0-trixie-amd64.iso d20d9cd617f1a348ff87e3a3ff14741c4f4442669721fc756092d165a335bb04f4bff80dbf81b8290044a26016d51d7836c267781f898f2cbc912e8c96f59106 turnkey-dokuwiki-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-dokuwiki-19.0-trixie-amd64.iso.hash turnkey-dokuwiki-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-dokuwiki-19.0-trixie-amd64.iso.hash turnkey-dokuwiki-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjAEACgkQ2fx1wp0K AzveQQ/+MJgic1lgJjlChK8Qpm7pY23Z30wn3q4taXntILfOawfM9fSJUgidXBH8 +hXNp9TDFlgxZUttpk+/s6eNlstyrkmCspbvb9IK8umY8MD+ncqiwjjCQfZtb3MG DiXugd484MECjafQQohuGSj0qfRx2bTmGHRqZ1PLo41qNqM1LRJ2l08Z7funZESJ 1P+SZacwAAD+Pa8F7nGc6z6To6Q+7Z++AkSyxUPBssAREnU+UYRCJimZNyqsGTfq MmfmNtZhuGErtEYCysa4wW/OXK6H7WwQZlgD8UlVthFHVg19+opcfyCSfZZXyXWe JFPDT2+KpiKEJ8hZRmz293rUVG4se8RokZm+N3joiuz1LpGa+1kVja/OtXmEg5OE y6H+hviKSmHMlBd7+X38qYiTsUmnlZUG34okenTcWV6FstM9svcbvMRCPTaEN09a zt1rfOlDD3IdLuPWgxVRq0NT0Xm4HgS7Nu06LOiRv/+ilUGgz/l502AZV2aP9v6Z wntaPurnjQflqK1Uuy/guK0gnuqgd+1TAsu1DpjbEUFXH961pESfmrgfbpm6Lkb5 NODtmLrC8QKOUnvI1uc4hOzGoD5wlpzObNbyquiHMYrrJGkWJEF7hkR7WYHvwogJ 9wnUwhF3klDd9xZud0K7OiUXms1pHJa262fpnVDaianQnddwt4Q= =/oct -----END PGP SIGNATURE-----