-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-gameserver-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-gameserver-19.0-trixie-amd64.iso bb02ebed6c3b0a6a178894f04bdbce1b99dac4860011b2e4ddef79fb2edde124 turnkey-gameserver-19.0-trixie-amd64.iso $ sha512sum turnkey-gameserver-19.0-trixie-amd64.iso 658fac4474f511f25a58619568888f5b254dd4fd8d4fc61500b3412fca6906623b8428646c251090880d45cecef136c4a8c9c12437855b73b7cd7f387bae0967 turnkey-gameserver-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-gameserver-19.0-trixie-amd64.iso.hash turnkey-gameserver-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-gameserver-19.0-trixie-amd64.iso.hash turnkey-gameserver-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjBUACgkQ2fx1wp0K AzuZYBAAmQpTOMYeBROP1CvdyemOPX5q3tg4ipMUYQ61nb3p/AyCv8e4SAVbJmW2 z79dZC6IS7izo69v5t/KBjQ+lv1R36vJJIFOYsr8r2KZx6QudWEoAG2rMAUdvb34 lXDH7geXHS+r78IxWdCPoKew1VGR032DJrJrPl0RN6BI+C762nXloUzRd1gYxtp0 YfiGBnI8aA1iiCQPQhIhYUWCHFC9hxa1iNWB60lWEK9K5GOaTB3mnzu1q/5+ltWT UwIJe4rnTm/9JEk+xOO1jA67FyYxUW8/U6CW07UciOxjqpI5unw7xi+GYKN/yBIx Q1fFo8RRklKN90Q1vjPXtFXkHFhGeSgKFCEmLC/pAJfDMjGWikRLx3k2FA4621f4 ZBJpkZmCyb9kaOUij5HyfGVVxGqxv07tVqSAN/HC+9cu3OhVGo+0Ht0Yvh6UsAaz XsN8/ApK9/hQeOUqA0zf3iyDspgevQ24jSpBMK4BBrtWLy3aZqMYR1v3CVbOWkGm IztBwU0wiDo3zLYStngJseiDrptZbz8zmDn2zjwmuVPk0UVqm5sG4rjRxF57SAQa alLQLwh2gmS0r7HvdaeI+YMsvQ7seLGT5Tnfm2sBX9JSFoS/qfWRKbrg9rtcPEP9 DfYG4sTOLuEVVReJYriss8qMuluWQ9SLZ9+geeyMUBem9dcbVxE= =xKj/ -----END PGP SIGNATURE-----