-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-redis-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-redis-19.0-trixie-amd64.iso 43b03649ced58a710361c8dec63484101a8ae79cdb482eb3a00e597633a22e5b turnkey-redis-19.0-trixie-amd64.iso $ sha512sum turnkey-redis-19.0-trixie-amd64.iso 74f90aada3b02cc572efe568b53a2fe613c8ca5d6d118c68fdc3c0bb694433670697518fad6c5b2024827db6778a60be6186b6dc258adac1a325d964dc7cdbf7 turnkey-redis-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-redis-19.0-trixie-amd64.iso.hash turnkey-redis-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-redis-19.0-trixie-amd64.iso.hash turnkey-redis-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDQACgkQ2fx1wp0K AzuVgg//f/S2PDsb/v+JhVIc/SbtWKYLc520ITPrzbbWCE8RvzpQoY6QpfN0+EZp K66u1bI9icnkfQfyjSv6ylQrwjSd2ykTGpvnK9Knntbvq1bVW64UgAsOMzvqk9Ym egYPOugiy4FWrtHRMEvekk6HajL8PGyvNRUqrYF7zBD4V76is+A5f1WMIGtsdMiF U3weXMTu7c71zLNcomRbLOcIcfTHjR4QTuBq8uIin1FcCGAf8s7ae5To51+XeFvQ T+dW/gIH0Eid3VsIwA5fFvmYjNCP2hwXaJIqai6Zcsb6iBQ/N0SZOs8FXjM0pwfC e6Thlffy5YHA1XSbDYyFWVX1Cw7j1WAXqRz0d70J9cIjns0hlpFwybY01UHSF1gj l/DPwtvIx9u78JXYk4Ptv6wP58OailMfo2WiSu2UffviXpwZZ6NJcRZ+bxG4jqmY Vcz1PU/d4gBCnVW2lUgHaCmHyK06eDe/H4SI8+MZ911+3RyTmIMHfaGyO1RcMBT8 h6VKA09fPOKiCDELyQAkkSBO3WCk4hft161WN647Ao43gFA9Q4qeKyfCWCzzE09A R8qrLqVSyeZR7Xr1b7uV/WNio+bk8r/h6H9eUMZ8adt8FYI6JL5XHhWqd1+Dmub4 JkfYKvDBBQX1MuXU+ssVEzzcD/y2mlRfgAukEy0K0KgRsFLiGp0= =F+bE -----END PGP SIGNATURE-----