-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-mibew_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-mibew_19.0-1_amd64.tar.gz 5a35b6854c05c057bd2139be62b5abc66d838aedd4f7f0c8533dda58e7a51da1 debian-13-turnkey-mibew_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-mibew_19.0-1_amd64.tar.gz 02850aa7365eb3edceebe770901d5600d0fc3f6b7cc963db897865b74ad3577355450a228f5591d404527349e9ecbb02f80c8f7248f110888cd7bf2dcb4136a2 debian-13-turnkey-mibew_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-mibew_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mibew_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-mibew_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mibew_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgKjYACgkQ2fx1wp0K AzujPA/0CTmiB5xEVfXkRmX+OgsgmZPabeF4BLIpQ3QKmG7Dj64e06DmZoL9ypny pZbrENCj7tKrpRoPC8wqSHYA1kAu8347HTkYahhVFFgVtAnZp+Av052hyIzC9BzH vEijY3Enj+ERzKG0uctXLb3QMCH+zHOKsKQL7DPGGnKHKpsT3zRDKl64u2RMN0Vz 61PuPGRkQpcmc9hk4o6US5KvAnnaEMa/h/U13td6WJEJ+X0nVRdkrrJSK7wrUGOh QyYhhI8cvH9E3hGphMOzC95bkma8E5A1BgcrGRDhHdDQE5Zp+Vh60abBx+0gpTgW pN61oRLGOereae8ETgFl2yrs7XqN17Mzft3KAoTP0bBN8jmuJAFXzJQ2UqIrXa3h 2eEKt7FfDVVxcA3YwSZbr3cZYBwmNojIwXU5PjkoRw+KTQ9tu0CQ+K+PXRdjWmIj 7DU1xzLsJicCTlk/TbdHg0GYpX4T5x+R3aVtTF2G+CZadwNc7u9UngvVfj7ow88r yCd0V6KOgPp0gjJEzyRJ7z9dKbCl6s6nUDEwXLuXoERWgAiRyJGrjNLFO24xgJus 1QPBI3eBT51j3k+NK/v8dNlE3aHiXZkJAJGsPvAhFMCOjtB6BxmVKpDRG2YerLX+ m08J1KbyXOgiiW5dD2of3njrpNCWuKGcM25FkL1Ohr0tPWOkzA== =KjTP -----END PGP SIGNATURE-----