-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-etherpad-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-etherpad-19.0-trixie-amd64.iso 5aeb397a390f1e4cece802bade6a5d734e813e8a22f7a6541740992085724474 turnkey-etherpad-19.0-trixie-amd64.iso $ sha512sum turnkey-etherpad-19.0-trixie-amd64.iso 62720e8719c6a96b207ed5eafee8afcc8d582c861743f2687105db5b4915fa64f925997e405fec5621ef0df257b392b26a7b9db4abea683f578abdb4140101dd turnkey-etherpad-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-etherpad-19.0-trixie-amd64.iso.hash turnkey-etherpad-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-etherpad-19.0-trixie-amd64.iso.hash turnkey-etherpad-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjA0ACgkQ2fx1wp0K Azt8Ww/8Cb/edloXLWXphjH9J7viEwDh+8Lor8NtUvt5mFM3JwcMOIm6etleW8ef 2vx93eZDhF6vCT2QaS+p/kLIfcqcA7MPDXnK0YwlS+kLqqZ4YbBsXJP6fsFR2uI0 BJ8x5/C2maJGi7vR8K90Xj8wPjwegPK9ELCuodEKFzjEWGiHR76ogSuIkyA22f/M LFHH93Ys8UjZlxtJae8n/UIwdFPYh8Ww0oM8aNFkM8q9+wSj9+wzjRW7X3vqMsMW DboPQkbU52nBXE3xDwWVVNNm/4IID02rgSO8Vc3t/Cm9nxS64jgBvFjB6Q75gLCY t1APTDG2QlNQr2XEHaODlJgPAK2Lu8cQry8lwTjqYmIJn46mj2ZpI6WbajOfaPZ/ m06b9SnJJd1LDdHwImSngLdsGqIs9Q4fsUd6vA4l8EA19ldlkRaoEMrizr0gcbAi 6kXB5dFgMvUIGXaAPJkq/wMJ76iylykPFO8s6/gqB+Kc4aaeZ8hSrfDpVu+UdGyx vxMdKxKkkRQqiLQUp8RBxwrokWghO1hl6iqmgle/QVCdM6PV6pwXhuyGefDQ/Tpx yaF0reEsIhcpEYCQM5XJ1oeT2LRZ6jnxWaeFfeCyHa8bFJva7IR0K6DQkQbwpebX t+8KROnVgt5gi+qf7PImQXtEvYG606rFzpIWCOqkfRAFUnWqmvU= =eee3 -----END PGP SIGNATURE-----