-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-torrentserver-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-torrentserver-19.0-trixie-amd64.iso 12cf5727986f28d0c4e5b19c8ce7ddb18c8a23f2047e71073651a604a420ea0b turnkey-torrentserver-19.0-trixie-amd64.iso $ sha512sum turnkey-torrentserver-19.0-trixie-amd64.iso 63160533165fa7dd995482c14e8aaba9acfb6a839f4e5d1ee0faa4d5dcea9a63d2ba934d121e698daeb782839d456d06fc7bf9c2745fd35454ee0ddaeb0a65ef turnkey-torrentserver-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-torrentserver-19.0-trixie-amd64.iso.hash turnkey-torrentserver-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-torrentserver-19.0-trixie-amd64.iso.hash turnkey-torrentserver-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDoACgkQ2fx1wp0K AztaAhAApRO63Jmkfv+FWM8TECTgf91O/dstMN/179kVh2Du0ky0gGr2UA6t5yiU P34xoFM1hnPGUDlFAEooSIYu/+WMqAAQEfEy6NO1qSEpLLQxlUiR/WjVC4U8vUvi 7ML1kKepBCrC1jUlg4KPm9Yj0Rg++EtZJ/RXrvykXMgLqwEHCcTgtzTfX0wPMxO/ NDlnBvjY3PchExMlXj0dabRdOp45yKbTAM7yJZiSCaKuFx1pS4Fxs8qkinoHfpkP xwHeJ13s3qyGImfEs7hgbr/HfpbZviCwLnyjm0t0+5uZKuGg2S74bLMLtBlvmCy1 sZ8sDWDFioUUFThx7T87X2EjQ3x8hH/NO8PA9Yr3EOFXDT2yaa0ZEJIx83GG6RZN lfU1+HCiZV32/aC0DXYQEkeOSbs42tm+oBgasWFIiuiQ6unIdG6/unrf+go0YkqY 1zaFc+0HHuw1CKOWv2Hkb3yhSPNhPT6N1kAdW4iZhUmBsMw9aXxiXqMCaKzVwIzq ITKyGzaXtOJiqvO8mZh2w3AgaKhxjuhjtJaQN+6KcfqW+sGjZyfwCGXCOxTeo5Gq KXLu8ksccp160Eq7mTyvFudxb9PUZA94nVOgKuFZw7vW6zjV0zp6l2kH+p2g8+Pp GpHYjhGb9fUK0YRO63RSOJqjQbLwNxGhUI3B4JEGcVsobSfpQXI= =8b23 -----END PGP SIGNATURE-----