-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-nextcloud-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-nextcloud-19.0-trixie-amd64.iso 004f3c82e2a260183583ce544f3eb1034629a2d2047312d427c721de100b868d turnkey-nextcloud-19.0-trixie-amd64.iso $ sha512sum turnkey-nextcloud-19.0-trixie-amd64.iso 8dd0737641b9b5ada1d9b12c32b0e382913fd1822737d756ee6d3b815fea9e93acf5652375c6843e1129ccd1dd5352bb139c39fdc05e6282411386072c92e638 turnkey-nextcloud-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-nextcloud-19.0-trixie-amd64.iso.hash turnkey-nextcloud-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-nextcloud-19.0-trixie-amd64.iso.hash turnkey-nextcloud-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCkACgkQ2fx1wp0K Azs+Lg/+Ii4pIzk+hYJ3jT29nc1Rt9sN2o8sEn52CqYjKbX7fI4+wSXAm3IW66CW Rzj4bs4VHGrtSxntfK08iqcSy4zSGPn28H4bSDtPKOzFxc3MCV1sFCqsUNAXG647 MS5cW9zFvB7CDg9ojs0FwH3mYV5eh4Nvok5ADshkyrvNMI4kXkKm9nEiejRaDeE1 BNF4jmVHXzM9KFDWtoQ9omHF3n1BxVG68bA0+/q8CtclQMKRZkrfEJtS1a25//il OeFt5woEYwAn3V9BCPOlI0qKy/ynYkrKYYnG4m8q3MdiE1x/biuKD+KgWOB0/YcB bbYRDoreBm4F6Cqt2DuB8l8okPGJ9qtETxn6ANKHg90De2VQJiAKCCSmR8A1BdGs u7LjDSXSj9oq9r7lCUijNXFbp5opUpw3nVhGoRglCcofKq3mJNcS6rZdDtEhEJbi 5vRUuLuZlgPokUgboJ2qxHpJdiENDUoCg0GvU+/qBwftKpGet36N3vei+SlSj+xE kcDxdrZXssFplizz54xA/7z7pQUisysTQFMt2lTtxSSv4OGb6QCB3ZiLIaFlOOfB MOpaIK3j4EiFd0b2QvvR2j8c6lIPP9likuks53Jy9QWZUhcyNnha468OLz79rWLs p204WzBG3hLmD/BGl0E5LYLYuIjZ39tA8qeUxk4i6w4cLiIN8TQ= =tqRl -----END PGP SIGNATURE-----