-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-xoops-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-xoops-17.1-bullseye-amd64.iso 6f04ddbeb2e927b8a78a31f28e5f0e90fc5072f6881aa2e3724d768bb8434899 turnkey-xoops-17.1-bullseye-amd64.iso $ sha512sum turnkey-xoops-17.1-bullseye-amd64.iso d069d69ec4bb1eb6770b7547fd074f231beab75c5e9b764f33857f11cb626175aebdd025bc7cef983ee4901056e06c578ae630e104cec4d855d8ad03c2815c5c turnkey-xoops-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-xoops-17.1-bullseye-amd64.iso.hash turnkey-xoops-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-xoops-17.1-bullseye-amd64.iso.hash turnkey-xoops-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx/QACgkQHkh6RjHW /rZqVw//X548ugarQqFsoKtY9FK2XhCHU8yV3DlFIIOH57tdEZZfCyhQx7S0EWKs f5DfeA7zAh/6oKLPTMBb8EVD81qrh26kMka3C8b3rnOooyNDfmno3GnitBOMwCqD NTEvmBeEtubMrQUtNax94PFmhoyz9e00YfeonWhg9+pEnmbA+WvE3Mvcez2B8uYJ fgXUsZ/q67Mt/GlKKiiY2xhhUVILT0bFayvYkSeUsxQP9+9Aeuxr3GNxHFSAON4q sDDpApCHRXTkPP87jsXKZFFB7EXsWHjMYfnKDYFEOdUOK1KPewhc21Tup5ax+6s+ F2wgVJgVJF22lIvNo5a9eTcZJPUXl/VU5tvJk86ZGWJY3/qFzl06ca6vwHGVEBcS wgjNUT1acw/NwHz5ku9JatkfclACbo++uM6JpTEFWD1nmiQfPNir2f+NYEwqcEI/ SJv+iClr3ZIUyYKSwR0UTVD1jiVl5c2DfTyBkOseL6iARFBBoAb5J8iMNVFfwMXn NAx/7fjYLGQujZcbwkGEgNGJWHV0Ry4pWglRcaek73UQUY4AnOl2o164I6bhp6KA goTxlV8QX4FjferzLbKRyYoweDbKVhsYWB7vdOwaPOdmjmzcomkaHC3rhs2ff+Ex SUqHM5TzG8CogX3AbhEUaP2xP4RZTb7ZL+l8yB2DbdehY9d6x68= =Art2 -----END PGP SIGNATURE-----