-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-openvpn-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-openvpn-19.0-trixie-amd64.iso
      7e7dc41bb57b62e5dde28db515c932b59eed89b0930599428f4031827584b5d7  turnkey-openvpn-19.0-trixie-amd64.iso

    $ sha512sum turnkey-openvpn-19.0-trixie-amd64.iso
      4d77f8bd57e7db48ca599b90b4998dc4f84579d0b50717db3faf350bdbe0b8e53a858a96d78892d651a4c15d61d5dcd4906dd5971ce9df49193eeac2cd8e741f  turnkey-openvpn-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-openvpn-19.0-trixie-amd64.iso.hash
      turnkey-openvpn-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-openvpn-19.0-trixie-amd64.iso.hash
      turnkey-openvpn-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=rqcI
-----END PGP SIGNATURE-----