-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-mediawiki-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-mediawiki-19.0-trixie-amd64.iso 4477807f221d013e3ac3d2b9237e2f698b8f11fbcc807ec720d35dcf3c7f87b5 turnkey-mediawiki-19.0-trixie-amd64.iso $ sha512sum turnkey-mediawiki-19.0-trixie-amd64.iso 24328803d65140f7eb4cb98f2fa4c2601ad46a808d8c55774dbf447cbf0f60b236c09e07ec53a0bca4ddeb37d4f058166bcacc7db70a35575e7042d7c02ef4a7 turnkey-mediawiki-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-mediawiki-19.0-trixie-amd64.iso.hash turnkey-mediawiki-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-mediawiki-19.0-trixie-amd64.iso.hash turnkey-mediawiki-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCYACgkQ2fx1wp0K AzuEXw//bU42vTO1F30A/dA5/4k7XwSMaLlpHdrf7XBaViOnhOW6zKttp7nNQBZo Kp5fS2vNA1YRQIUSLvyyNjcoTtK0XuW9LQWUB61nyDJgzU9C/WBBAo9v95FVeNS7 9aSa4L4pwF+A7cgNJ92S+H9u//zFXm1bKklIGqq+ujNaWChWPtq3r6zPP76tcWu9 5HrM252Zdke1/Rk2SGe9x2VXmKusnRCi5b5wtsiF6iqJCscDb5g3YKXcis1BpT2A aVt4Sw6erjp2jUiWKVsu2MlHpEl3GYeQqy9BJIV+CVgByeVfqShPOXV/b9TDLg+A 9N1SU8rYCBG3zIq62WJjzEOWOfrq4vcqhu8HWlOC9H+LMVI/Z1HawWbSBghAe3Rj WSa4h7smorqv8yet2K7qRPfyn85CqiBLC2Vl4xmDUNU13lU1yysQj83kkYP5qpSX cKooBdwFrdlqS5g81XXOMZvHOT/BJJSKkEkPVYVgSNopRjkMOROxDEZHFczAEuKO 5AzMmOE8fhQYcs+mra+lLoByx2Fdx9UvK0TfuFDMooRgnMnB6gtVHVEBO5xQgiYh j8ZrIgvUfL6e3Agq26nHFs3K3J6HTfaFrvdTweDCfEuuVlnO3O/QvAb7UbY2iivL D4TToYNpumtq/m26tjwa1v5ZZF3QaunzkeqOh4rHVe2muo2GxxI= =gFnT -----END PGP SIGNATURE-----