-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-snipe-it-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-snipe-it-19.0-trixie-amd64.iso 9df5ee25958c90617a74bd3b42b97e84d2ffe5d01da6ec5d210c8ea0ac9ce7cc turnkey-snipe-it-19.0-trixie-amd64.iso $ sha512sum turnkey-snipe-it-19.0-trixie-amd64.iso 8122ae4eacb510ebb4629ed21e49cb217a40626819ba6e66139a954f855eaa771d20aee80ed01e8e54c6148143331fe1cbc87bdd916415b21f72e903a1be77c6 turnkey-snipe-it-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-snipe-it-19.0-trixie-amd64.iso.hash turnkey-snipe-it-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-snipe-it-19.0-trixie-amd64.iso.hash turnkey-snipe-it-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDYACgkQ2fx1wp0K Azv+xg//YNPbzrRURQRwKR85L4ngXARYoO8lESKWVx67y5KySO6MYl2MAPpZBRDz FMCLFhmGIYNXeacr3p5um0osj4VusGjTadq9vvPBOEtAOwdG926vwZDO26fDMvdA 9s/RH8hgE0QmIeEDPZVb/YU3erRUdIL5nJsZcWkV+DgyNazIawp0t3wTYvTWX++0 bAllCNUJQp6sSDPS0tEbTIdvNieFxvqrSsLgFg1JNSvoOAm0EcNJBPjQ7D6qnHqg T4cFoviMqu9jBq6fIk2opkXN3A4uKj+HZN1IZr3i3CpA9NCrcyJvssv4Vjix7PwU 4dHJYU09jIelzgV2vSZlqAxgugCVPk85eD+Hl4UwxMAqClxA4uiq4roIKW38suv1 ZPjeqArzt2yxYbr6tkSbK/oix84jSGcE2o75qoZJuukIJk06lbiK502+DlUcG5FM CuZjCilBafbMoI7sq5ocGwN5CVqOFwtKins9z2zCGUPoRClCoH6rIJMYfigh+s/L 9Yf0wGcx4R2dOyLw7zEKqWB/tcCpcI8stZ7tKOqFqYQTQeIHMke8n4iwRRfaWvpC CAxEoyQkfkfoFSNJGDdKresmhdM2+hQmPMwWR9m9FeKj3tpWCioRL73pooD+shbe T1dy1ETDoKU7uIZKal9xRUjbA1C6kG6EV/KrbJpfTmXgUmQpk5s= =PhIA -----END PGP SIGNATURE-----