-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz c726c1a6950c690b4415f7212657fa51aa648abe07508f5fe20050970b5260db debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz 544fcdfbf9774bde76dbdabc8f9fe80841e9e7215245810fd1763452ee753f0bdbe809ee695fdb89b7ee2f784c2b401c46164f59a6a8f60462da35724cf2d4a4 debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz.hash debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz.hash debian-13-turnkey-asp-net-core_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre3wgACgkQ2fx1wp0K AzuuIw/9Ee+/VrN2Klhhzw/XGcymVJrJZdxSJoq6gpubKcw7JfpFl/E83VUeJ21b np9uUgm72PTsRUyJGtAH1P4ZwSiHlyIY2n/zoadzzzvwi45iZHOpRCJEz6VFLchv +udKLcJFKijbQYKu63NyxElFqSt92N1m4n6RpsrpK2jkaR3TyRFQO3sYT78jVpPf BRmjE9IBWKeLG9l2QnX0933fFGwBL1bCBqjcskvs33pyf05QqwnuG9jMi2+2hINm HWYGyuvM0qHok0JMxNfrH72GmO+6LUXVPL8HnlKYANX/IEeLYYipCV7JK+UUCkrF onb3+Mvij+yU/rwT9bYHz+o0X7xx6BVmcwxn6j68BxxCHb4VDvTWCGkwSHh6hBME BJSbz5M4F50A5xMMLC4DWD/hoTi+3CeR2vJdh5X6ga4xnmNXV35STiWJkp+iPR1M 61B/96Sl3DBHQw9vZEK/QjvTk39BfO3T5Wxf6ZX/Tec2+fVj3Db7ZpUZOABD95ag Vpw9RWerd59JiufRhTHZdjaCQiFeYwUsWfOnPobP0ndMpA9a4A11eKjJi7DvqnGh rSLBgHrLJ/0wXN8xY4Pmxk6UZuhJ9KraNNi7l2RftxerakU2SIWLTPm0Kn4y40Xe xPzk7ukQe0jQE2xFWDuEV9aliP5T/mrAkz/O+vCdg7z1QoI6+Ak= =zo8r -----END PGP SIGNATURE-----