-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-leantime-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-leantime-19.0-trixie-amd64.iso 27b6dc83fdc6785435353c8b6df5979e7d55b04dcdc0f4bc114a853f90af436d turnkey-leantime-19.0-trixie-amd64.iso $ sha512sum turnkey-leantime-19.0-trixie-amd64.iso 52543fc827a32d933a06494ec4bce58b9a1952f0283b49c38eb7655903a521ca01c07083293c26588f1b2e97e540b46d35ab8e020c219c7b1a4713d41330eba6 turnkey-leantime-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-leantime-19.0-trixie-amd64.iso.hash turnkey-leantime-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-leantime-19.0-trixie-amd64.iso.hash turnkey-leantime-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCEACgkQ2fx1wp0K AzsM8xAAjlmUo+jtlArWBKBL5pJ8K9LAS3Ds4er9aFvFWB4065DPhNHmo7jpttRC SUIi8V06uDOzSKcnQC50c09YD+hIWoPQc3jdn4SffuzYzIjvMETDacAzrbBqZ4rW jTDALaunA4irf9+zJ7bLXWa109+UhckSX9YIiNyLQTM8y8xdl9Cac4t5Z6JyJDZi p5iYoCZLMNgXz6N46EAeZZOy7mBRv/y9f98Ttg5/zWpeT6khoBwBh+pJxqN7sVbP Ul6wkEJrvBOFk28ryLjsEbMXICyiboSd3ITqVylhikpNfwmb8oFEAtUkzFoJZFJs +cHwUcWgAO5l4orxvocep2vAbsuURqLyPbp6AHoykFrt+LFXKsZUY0otS75bAQ6U e2dmYD3zObDVHkS5P6eTS8QakyDWFJUWF5codnrvekrJwOcI5bIUfUvE/w9zUH9X ncgJHpHn0zxxSvyb29fLMcGroNstudd0l5dx8LUKBp88ZnfBWduTEMQ7QrQPCRlz 6OyMH9KlJAIs8g9Gllp+ZMTFS6DTtyMTmK3Q6j3jaED/am38yrk99Yp7Hjgi82Yr cCSG87KNTbM+BIx5PDI3GpJuIS1zuwsTs0G2lKcDvLC/rMld4H6VjJXqWmknzTOS 8yms9iLNn48Qqr3olvqfuVRrVq9OuekBwmUAl+5IM3voFZH2sxQ= =UWZb -----END PGP SIGNATURE-----