-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-wireguard-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-wireguard-19.0-trixie-amd64.iso 769cabff4e67c1ad76102faf7b7fde91b38df5a6cbd3b54bc34d6642d475e9a8 turnkey-wireguard-19.0-trixie-amd64.iso $ sha512sum turnkey-wireguard-19.0-trixie-amd64.iso 22deda48f23f2a84ae8f26ca19a59ff1d10f9ff261348f7b2f178259e3c5a0d6d0147555fe057bfc623d7c959738b4dad2836826798afdd7d08fadba6123c164 turnkey-wireguard-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-wireguard-19.0-trixie-amd64.iso.hash turnkey-wireguard-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-wireguard-19.0-trixie-amd64.iso.hash turnkey-wireguard-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjDwACgkQ2fx1wp0K Azvxfg//aq/4D1QiATqWFrIADVnXDihJ6Fbm2a6oUAP4zFQoRe1tRJy5zOCoHxb1 B2yd+JtlEwlbGyeeaOiG78O0qKEg3CTyKITuCa5Li90NXbRpw830ZkOiarYYN7JD Q7/o1w1Tw4+bTSm798FxoZZEc+GWmXV9o5aou0ftGyqB7PNbFNGm6hUdG13Ydas5 bLw+wN5n4Q8+YoqCtKPGfymC/G2fekIyF3msDDHfqog1JxSnc22/TEYBkQC2635n 0oHZwqkGF3a4k4pujwUOZbBtImacoV4bjeaycwlZN4EVBvLTgTihMmACoAhLI9kM anJeJSVoqPSwN92j7BQyhCDz+Bz3WoUyVCHnisQCTrBAENZrSEUAxM1zZJysExz0 wewcpZJfZDUpgnt107OVssCvrprLaR4r1zqJt7Qcg3142a5oxX80/d8CtWMoEgJN 9D2/796F7EVr0xYjFIINHDBmzuZ5rGSN/D2JzQUTE0V2+27EmPG8gc9qH+trUi9Y 5bejP4cQr5IjwbqoIzknTAvu0quwDpq1SAFckvkjE9xt0eXeKcMLzdswxSM2yVPC U/6WRvgEoL+S45plqGSCqQbvA9q2fWCsdPOxeMs+Tal2l3KjiKMw5kDTsdWFSny2 jT+hOrVvmV/VzAthbvzup+GC4AnXWOIsPq34/Y/gb7HWrKO/wBI= =nMpl -----END PGP SIGNATURE-----