-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-processwire-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-processwire-19.0-trixie-amd64.iso afa67551703f24540960da4a012da611e13c4f423a11d94dc617989bcb1067b5 turnkey-processwire-19.0-trixie-amd64.iso $ sha512sum turnkey-processwire-19.0-trixie-amd64.iso 7a019b2c18ae2f3a6cdfdd12b960d834d52ed386de3c3c54f697e3e9a03f2874c9320bb8831049c5d7eace0c871f212f5dfb89c8bfae96cb7ef4834e3faeb6aa turnkey-processwire-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-processwire-19.0-trixie-amd64.iso.hash turnkey-processwire-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-processwire-19.0-trixie-amd64.iso.hash turnkey-processwire-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDIACgkQ2fx1wp0K Azs+PhAAn56SObFyaIcav63aqBUdRWZtnE3kaf7ZiRVpBHUGLJCf20k6rtL6DE17 8tirN5v6XJF9wzTw+CsNX9zxXhBsYXr/1u8YVVsd7IyElOHwyOesq+FG7mGhE761 011P0k/1c6U5eizqOm+kNkr40CWAZd/bPd8Bean0wp0Oiiyjbx8g0CWy3EMuNzkp hV1i8/XL9c6UElSEe/SWKknIsc9l0ZkF+jcMljToByLQ+MDFtpbpT3RIqFWNDIRA 9gIjb3uV+gHKpKyBQ4x8P5JBkGWXt54iZdWRqipVEf2MPlnc4gDS57qDqea9dovV oirqvl9staT6q9vNDaQ5FJqPXF/mDJDgqZSSPwAMXXFKI1tlBJ3EYxvIiFuoAy3q mGNfafE3Axv7ollumHS4BSMlQO0gpctueTkm5ZaszOv9WOEc6ykX9hGVVdZMLW3D hlzcdmdt96f15Y8hnE0O0MaD+kg+QQo0vUCp4VBvSHE+rpatzpkHxzcVJLfbiG1X TYQLxLNLiIlR3QMRGnwiLuOfjWLoMgTJLtB7ZPvQ+hiLlhP61LuxGiNqRJh/s0th I8u5Wcf63fWz9CYudr0C+EETo/a8uhrKfOTcmqG6uclw3Bll3te1mLfGxoCISTLA lYyN3/P2GLOrYUDQm/3P+WfWQWdCJZ25z/o8/v6Ssur+rGnKZbI= =GHbM -----END PGP SIGNATURE-----