-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-moodle-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-moodle-19.0-trixie-amd64.iso b7be43addb043d86a4bc27f53f4721c857fdb87ef14c79d9e23db67e642acc08 turnkey-moodle-19.0-trixie-amd64.iso $ sha512sum turnkey-moodle-19.0-trixie-amd64.iso de9a0097520dad90e92eb72cdd5a3e8f2ab72e853b467233ad6f28696f0a5d88b7f9a94bdcd8cb7f90512318c5f9f920b9a73ad44baba81809cbbf694fb59354 turnkey-moodle-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-moodle-19.0-trixie-amd64.iso.hash turnkey-moodle-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-moodle-19.0-trixie-amd64.iso.hash turnkey-moodle-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCcACgkQ2fx1wp0K AzsTSQ//YKb7tkLkexSigpYCmATY7PscOc+/eQq586Ny73iR117U1GWT2aHvn/H2 RAsIMSMq36YzM29ufhXAHhkcDvZ0tOfbhe5Lubldjal2ni+FMv18X59rd2KKUeH2 He0Dfw51Wv7GN1VktJPKNsN8u2cmlmeYeU/n5dKqiAIsMpQGQrDcGGBiO5vQ7n1S EgxMB6QoTQ5oJdJ08fkBFNKK81CyNbFm6ehgXt2aFkWzLl1kMUETmc/lvmiBLCyI Ay+wR9F0mxP5A5vTLBEmUYqK3Z4rH7eT/ntWYMQfOGj6Ujtcr0OTApEXYZ77ufd1 40MFErUPIIvEa+Buoi6NpgzbTq68jziPm8bpd89lj19njhzWNtQgNhx28SBBZMAp JIW6q9EpggxSZE3JJFIqsuDO/8qnAe7d14Ofu2gis6pK3pzH4auCQCgROwgx+DUh PyqzUUp8qYK+N+fdbG86OrlzmgP6N1u2yuL/lcGlFixIj5f8I8ke99YfeQRNgrkf OxTb7Swhi8aungQIFQd9xFfo+4SyGxJWIo10WXbXYVAuFrdnkdvuVFRAVc/YJDYJ Cgu3TyVL+p6kV55hDYVewnCKaBL3HLMshqU+Dj/VpkOQzeVK5SU7KIMAGC65F6j+ milUf0A50Ccm+Ugpm+DajoO4/1DuLlODPIobdushxmg4515NiK4= =MSH+ -----END PGP SIGNATURE-----