-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-trixie-images@turnkeylinux.org pub rsa4096 2025-10-07 [SC] [expires: 2045-10-02] DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 uid [ unknown] TurnKey GNU/Linux Trixie Images (GPG signing key for TurnKey Linux Trixie Images) sub rsa4096 2025-10-07 [S] [expires: 2045-10-02] $ gpg --verify debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz f6c8dd46275fa95d1f0d3b365a14a8b5e7609553a76d464e18979c6f38604868 debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz $ sha512sum debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz e1d0afe70e7167f0d6cf6e9b73708ee655eb181068ff7100ec16863dd9372928dcc9b08b42f40fb8ba7cda077505e06bf54a2b2badb62d7039c03387077dcd9c debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz.hash debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz: OK $ sha512sum -c debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz.hash debian-13-turnkey-torrentserver_19.0-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmrgIskACgkQ2fx1wp0K Aztmpw//SwCIuleFjokkjtfCDfODi3ICwxQBdAQRayUZ8m3BHfarlxgaVTIwzpz6 XAojlMc/7IuVJjijrtX3mRtD0bqf2qpVTCrA8qRsUEbtRBekP1G1dIDlSLefL4Qs M90ZqZIMdFOOFKdmF2QAxuH2QytT+YafpTbswb1lrfJXK7ZKKY4BUNeBUP95BD/y IVtdRpfsN0LL447r4ceMju4yTwtBMz5BDJzfgTRvJtOaUNiY4dTs+HysFvTbhr6W uMElhdZe7V91O8AXfUvA91ZqUnk1e2Re5ztA4gfbDKGCa727XVptWVj1+cAp3cJu Znyebtyzsh+NesZvBvFHG+vC5eSgp4lEnN3toWIxKw8shDW9gMHKJREwk+kNtrDk Ke8VjteWtHXpf6S10aopUmKwA6wm71gTJFgdoKpY6Jktr+bWKGcmI9btf9h+9l5N qZe2AvFhSgQ73gRGUi27kU9CBbtL0HNTd0aphx3ZRaXKbwgIQPYPS5sZV6u2Yatw m/iY5mRyWRJjEMmWY+IJrAYakw8x7T6XFX2FR7MqNWjBwWV6C3YH3oLJ6G9gY1Ag 2jT4RNLIXapYmsYRgegzZoxWzUDJW2uzmmZQwC+h9ccNgQHARfvVEIL5ssGCcBe+ 0Jk+9pQc61m/qfZz9tEXftPqaDmIjDMmqybXI4WXTP5bmq1urh4= =UpOG -----END PGP SIGNATURE-----