-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-mibew-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-mibew-19.0-trixie-amd64.iso 144033ffa7e9ca7da26a0b6044b9da8409374b5e6102e02af6cc1622f1213ba9 turnkey-mibew-19.0-trixie-amd64.iso $ sha512sum turnkey-mibew-19.0-trixie-amd64.iso c925eeec575cb4ce8a14dccb0ca2b6cde4cf3464781de623fb37fee8dae2b3cb7fd74af7e420dcb1525f8b21845ca0bd7a2bf8582cab41ac53b92be2890c88e7 turnkey-mibew-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-mibew-19.0-trixie-amd64.iso.hash turnkey-mibew-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-mibew-19.0-trixie-amd64.iso.hash turnkey-mibew-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCYACgkQ2fx1wp0K AzuIcQ//cEx0H7WLooX8/Oh+qYirG9J/q7fOKkR7DOpFsKoByLZI2mGKGvb8ual3 Yeu2pKVHLZL+yVrvkazdO5tKOLi3w/0YzbpBO5g7pwYeGEJzIWDg2o5fpUrpktQr FJ0mQCdTWadEbmkP+yNwCCLZylDXUkMsQwyKn6NziDzPU/W9SEsBeiyoURgRLVC+ qNCILykahVD7yU/rRlLpYVbTG2L5tY6Jf+peTbennEnwN4H85F52wBpV0kyNkB+Y Tj4/ixXP/Hyja9fle4chRHVnMe1C/oGBzdE57wZm2583h/cf1mQO7R481yoycnJS 3qpSD1DEhs79+pZzQypV+935TsSh8+z2R/sXXNsyXkliGMTHpEx5+osXIzmKU10+ ULEgOo9e8urAu2zTldFHW68fH9xjb2RIus/zI4eMn1B4v8xKUdAsC7AtRV8KK5++ 0SjTNHkKwkbPaUnGK9LPfgQMNN3wQwVVs6IktUV8PoVEBKemUNZ7rdbYSpKi2i2y R8Jx/C1TzTn5XcKBaCYJyML1YqLDDOlGdRjsTAUL1JfGkOk/00wm9dVgFCkuUnbp 0/ikOyinx/vGJTq5Gb3kNXH9IFHf8IWeGo8w+Y8FEMe5BZgxyvaH/g6QwYg+jwai 3YFWUQcIMneb+tAFmjpxBPrv2ei1WmSMZ1f7m2cwZZuIp9du62Q= =VBet -----END PGP SIGNATURE-----