-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-mumble_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-mumble_19.0-1_amd64.tar.gz 77073877ae4fae645588ee7d0a0700508ef7d802702b9b71ad592bd8a4650d7f debian-13-turnkey-mumble_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-mumble_19.0-1_amd64.tar.gz 4fb612ba665f9638e2b07b79a5b1fa58c21940f22729184f3de357b4413e5cc9e3e4747d5279debbd94b2e0a5302d4bccbceeb794ed3f5a411f5e95fefbaa228 debian-13-turnkey-mumble_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-mumble_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mumble_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-mumble_19.0-1_amd64.tar.gz.hash debian-13-turnkey-mumble_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgLEQACgkQ2fx1wp0K AzvZrg//WPyfZGAzmxlJUpjDa0UDWysCOrD2XFjHImQKW5KNfn1AvS9WvW4G+vzq wrJ7bkE9oIOvhawH8jCYyh5oAwk2XFPM9K0Qd6wPslphwTA5/Ye7LuviGCM1kqq2 eplUBiXcgj2EuSsdx2mDACgNHvMHnolnnQRAgfxIDqK0/cjTXlH/TD6a/ihKqn4s V3E7MuLOtbIX5+aIM9qw6TnJLUr6lTP0RXKIx3umM3oMO1lhYKez6XHre+13Jg0r 7IEbHqSIKRhPqrv0Mk87qPcMKb2PTAGsdEDDTHu68HetEH9oikwnxkt067/hgBp9 nSAbFGtgXvgrsLpyaaeRkCm0GWKy7V7+54/skkcQ+Ug4kvpglhF2Pn0NQsKL2Sa3 zsDzImYlZuqNgiK/c8NjDRb7SauPGQkINJ/imKVYVBj3EYmK5ofwtN3rmthSHwN/ QV+pcY8rWLfml9tDk4Zgk5LtwvxBgn/x6Gp2vuR9H1PSCLNPiCXnHx+r+eB+IgDx 702t5YsPzpjozee00ZjjIytJ6NFV+7iPZG4cJuDUOYP0Ehx1D2crPAbITZA/78Ch DexzGOiOf4jv9bd0YQI6NyJOPrNTjO8q9iWXgQgIbVY6OP99cPn+wbMYKRq1PLpp sQO5JLsvLIpJAMQYgm1OWJD7mI3Qhoaej4jOSNotJGI+H2UuoeA= =Q8GS -----END PGP SIGNATURE-----