-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-elgg_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-elgg_19.0-1_amd64.tar.gz 60de1649f88cc384e1c9da4a80a6225f27eeddec9f3bc0fa64f304f0aac28b93 debian-13-turnkey-elgg_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-elgg_19.0-1_amd64.tar.gz 6cf7e47b21d0bffb4dc9fe35e39e1719f60668dbe0c58ba636ac48272cc9e3349ffed47c8fd8e7e59be511608ee240626cf0c92694dd2e34622f0dbd345ce179 debian-13-turnkey-elgg_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-elgg_19.0-1_amd64.tar.gz.hash debian-13-turnkey-elgg_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-elgg_19.0-1_amd64.tar.gz.hash debian-13-turnkey-elgg_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmre6WYACgkQ2fx1wp0K AztWbg/9EXa/L3HQy5cAkcywVptGAVNyo/A3q7vyhObF8UP61QLK2i8Laxkmncyy wWouLT75swRLQ/KHc7rFEItUdES33i3+ISjw2ziCnABIVJgijCUnflspsK33lShK r/EV2Vdlvf70VQh9/JnJqJ9PFOIM5T+151uaDXaK4gH7aX9nQ0R5ct2x5FiS04vH i9zH5p86wEGVNZ8y1vynkQSzP1M+hmDErow2oYg1Rxs60fO7t8NcxsZ6I8DPGptS OB+SSo6jjn6U1GlyJq3unnB9vt1TukQJY5ytuzy6QAcHIKhTTnfgqnojS+2pmIzC OTLORGQM1KYzz7h5zIRnurMy1E7/BwMw+ypEsnHpl7fffCUt+12lYQhopvAtrv3s AuQfT45w7tdCyYcSllVMvhC6fHlkjNYRhDnXnhBEBeAZmEockfSb/DN76ssBNYvY SemldfKOiL7iM7slUGQbrUnc6IqYupP2gWOjaEtLGgOihiYZQTplJZfEQWLxM0bd eCoCbhFZwtiylMlHGdVKnWgN6bRgaD67EbH9o67r64fEoWeq40lRBGE0eK6eyqD2 87sjdAn0KHr7ppBkuk0YU1FKRJCG+k3QBeeqlipmIsJiLbRYAIhI9Se031O/mbpd BOg+e2Y976IjpvwjZ6uQCcYmN33wQwfslRGLvawGBvkc5joN/X0= =ia88 -----END PGP SIGNATURE-----