-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz 58fba80c1d221e63224f1f0d547c405d0bf62d2149402299db21501ef8128c2b debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz cd17566aeff962ec43f002bd9f00af72b69c180e8adaa25551cf79add1487d922cd34303067ef92f7b9cd732b3714a84a81eefe8811b5cacf56ca5620bdf7410 debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz.hash debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz.hash debian-13-turnkey-snipe-it_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgG58ACgkQ2fx1wp0K AzuY6RAAnf1fO4zfCKrBY0s/jVO9KrkZn3fVKRcfTpnX+1stcMAi0tMXRZJ8smwp W5TWKi/SGYnlgLzXPCYQq8cKIsPtgUF/oCBkzZpZn4t7GgMyZfu3cdmy+JpKlmmo uZHNUEJBJWST0rWfOlkqH4Jg74YFuZDMSsf+ejv4+qqnmCuCqg7LaLgHYnWesmJo M19zpewalqWfEL5rp/ZkYi9utAMZPmrmvtm/UMeEICbIABCPsS8v212aUWtbLizU l0fgWOuOgN1BWK2JV2iarhTbvwFciNr7zholbgITzcQWxi0FBmwKtjZkSHLqdsfT 9dtLwtabzra0v7fcywkAnGQSSU1xn1uYxixqnTDjxDL7C2uEn6eZFIsDQ3KrKTRZ bOmRfi/RnbHfHXBJTWvI6Dd27AYnc/BVSKPfiMXGi0QaFavVjpvSobTUTSREDYOV evqm3L6bRFj9TdUKQfUUAVyCsTY3LqIMHKOxJC5AJV+b3aASBJYyES/XjYypZ2hp q8AcdvsygqZfWXqTkrArQYICBHsx3Rd7pODypKrmhkzAWk7aoaMccKlwIXIwng8i dVxZZn33VAEbPmjj70Ni1i/q6Qy6lfWWhBrdgVDYxBaIjZxvK0oD3Kkz/90s0W4N QHh9aW0fORFTu7WDCuT2NabKUAQQFkMg4WNu0OM3MULXPq6ckCM= =qi7U -----END PGP SIGNATURE-----