-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-limesurvey-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-limesurvey-19.0-trixie-amd64.iso 65b0a0a1c926402a81be35025292701ce0554ad91af23b38eee6514b2cc4eb9f turnkey-limesurvey-19.0-trixie-amd64.iso $ sha512sum turnkey-limesurvey-19.0-trixie-amd64.iso e44faca5384031cb3ea2736e70dca4396df020ceb675576309ed8cc5023afbe6e8cea331031b68ce6bd2d2a232c7ab2612138a845b5f5254d36615bceba15cfe turnkey-limesurvey-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-limesurvey-19.0-trixie-amd64.iso.hash turnkey-limesurvey-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-limesurvey-19.0-trixie-amd64.iso.hash turnkey-limesurvey-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCIACgkQ2fx1wp0K AzuAGQ//e+5qVhjJu+3Ik/ABrYr/1lUQQssia2MPK/+acnx2h1xopmB3Ijc/9pYl qHWvNpudtab9uXNU1ff5j2ZuFKyE+yIAmTTn/R9iTX0mPj/T4u0rmaP/kb0c2gLm 3tpxPmN5PfmYLjWx5VkZ5AIRc93Omzh0yCheWNetCT7BxR1ip+Xx8xy12/zpk+1B v+R3WmWUDVBxvN39lTZLYAwTdha74tWpJ3lYA+pWQ14xZDPAOI1/q7bvbYCBxfgu /Qd/vfAecpYFyJy4ExyTBHpOMvV0S9FLUfMgArOHBWyHZZoDxsSzMHIVKybpmow8 UCVYKuGtiGm4m4PDZPhmIwktEdyKUnTc9V2CMW/MYEeopueVWH49jKj9nrfGdauM Vn7hH7qdKgPRs6S+Sreo8KzxzXYvkNN/u2i+nmg++6ZmYYijvLs8ZiWdj0NBQBLR 9mj6CRYWRnVj4KG64BUQOeG9VeIX2OZD2Vt+QG26ARzIBCKrhtHYNQYanWhNAV6t oaQCHixYwPc/ZRqsOo3W+Hv0d1pb8KtvmtvsC0lLAUd7YwsyC2SOlbuCmJlzNELn tX6XoC393TtMx+3iC5WHyZ3N7TXLUx60Su3qD/mUNusJY4pvvJ7rGRo50EZ6UIQn nFb5iWTWIlvnDnJX0vFuU7sq959prNT6NidIz6SqS+LoH/GlCts= =Pd53 -----END PGP SIGNATURE-----