-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz f7ef493bd5eaf9f1afd132b3fe93fb6ad6332a2c270ec58131b6c72f79e33d99 debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz 9779238a240ad3d2873b7a2014e9e30dca8f270cc9fbb20e82de1fc7d20ac8dbc4db75cbc06e86e87ca2865eae157dc4b4ca93e1008c2a6f97299bb08dd11a62 debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz.hash debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz.hash debian-13-turnkey-ibexa_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgHCcACgkQ2fx1wp0K AzuGZRAAo5KCrjRDc3xPsVgrApk81yOCS3yYOhGX36s/2IMRl5Dml8K+gnWu8/5G hk6stSp65nwfrDQAvNbxprXr22bVdOtsTX9neTnhEjDB+6FZgNZ0pgLyxupLAQZD ngCV0yubWK4F8kNqI8OJbtniLEkMf3srOeZ8FxeFTqH/G3TJVStfdujA+qAqTil/ VqUI7DG1UpWf4S2w2TYj2rZMIVw9BvdVUEH2+LpMsS1E6+B4jVx3Kkd8rAS6CfSn ryYMl6AU+QcFvyx0JMydMokmsSx+kzMxPzjnFGNsBlihSFnNVT1Dk0HayyDhuwdr y4b59hy0pFraxqvk018TU5EL6oH9qohmU3KJgs3z5caMPhmtBu1OcZbvtkGZCxKH SsfJ1VlDjpzUv3CF/HMOhaOoz927h5l5t7AoF10G4iMc+ODz7YJG+nQIsYptuMSA Fwzuv8B7Ia/Iasov9fON6Tu+oX5IcRmFbY13VWZZ0FST9cVujcWZtAx8KaBJ5eUC IXqep+5DgcXc2iRZRCfPs74WNVBOd8Hpqc2QCiE2pCdgOCqyZJmgN7WJq3V3FLej XrntgCHGUSAm8bH/+6C5ojbg4epIPRpEgZidaLeGf1CGTKBHZxHHIPxxhTz2u69x eYAuiV5/RrDOlLu8IxoaaWaxaXT0wAKf8kK67EIcjFexYEc537M= =VCPN -----END PGP SIGNATURE-----