-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-laravel-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-laravel-19.0-trixie-amd64.iso d43e81dfd08c47e0fe9923fdf2c15fcfe7b729c1d8d20b9680ec223c777bb412 turnkey-laravel-19.0-trixie-amd64.iso $ sha512sum turnkey-laravel-19.0-trixie-amd64.iso aa1d0cb543f73815a43f1248ef0f0d323982f258d53de05290650bed7efb5104b13d704d92254fc58e8613940662573aeaa57129d09d3fb4ac54b1879cf71aff turnkey-laravel-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-laravel-19.0-trixie-amd64.iso.hash turnkey-laravel-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-laravel-19.0-trixie-amd64.iso.hash turnkey-laravel-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCAACgkQ2fx1wp0K Azs9qxAAikR5Ag/Bl2hi+idNU0AbTsRdhTneNqjHz1QqT509EEg6LVdOqHnApMY3 IiZXdAW4aFGZapZcd+4fMtXwdGqAy6PPjhzlJbrm2KEWkOW7ff5rBjX/6P6RPVaw n6hBH/70F6ArT1lOIwzgb9iYTlt0S2/T6nz+MfejzkG9j2k/JXaXUlEhR9m+igCn lFhz6uQGDzA182aoH/Scgu2OCTNzKhco3IPTZPZ+Kg8fx4F8O6kFzA5S9VyJcsN4 kb3jGIDZlm6c34/o39s6ixIsF3ylEbU0vHcRpSbB2eNsguUqqI3WHEGaTnstjAmX U4i4DWpcYlLlHx2RthmccWaaP5oqRDdaeNQpOykf58J9HXgG3k94iP+GyiIR/HTa J2XbBS1Jw4DxfQyKAa5JNdLno7VrmEj+ac6X5HbANde05oby1ulgIkKBu1yOzoB+ 1w4/hw8RE6WkellGxPUtApxfsng29aZXY/n/Lsrvez5LGN7PQI1qZWLscXUtE/Tx CVoqpavR5X3903nQEVPul8taH79aGwi7cc60E4SdIgsDFos1oxXDCU9x2s4mCX0i 2ot6yHmlC7nw9zOk/fnGn078xxZg3nFsVdjoRfLHJ+6Qm4aq0aJy4zrhspFPgKlc 7PVF7K/rAQZwfnLqBXjddQrpX/mWsSUkENs5JTm7wLDk38mUBIA= =rQOM -----END PGP SIGNATURE-----