-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify debian-11-turnkey-mumble_17.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-11-turnkey-mumble_17.1-1_amd64.tar.gz 87baa0598f9f93fcc2a662ac490ffd036af53bbff430941cf7b37166503dfb81 debian-11-turnkey-mumble_17.1-1_amd64.tar.gz $ sha512sum debian-11-turnkey-mumble_17.1-1_amd64.tar.gz 30a81eec66968817b9e06502141a476d0707643e3649034f0edc69692fcbff6ccde49e43ec9ef6ee09e2655faab1202e915428cc30e77af30749dabbac944d28 debian-11-turnkey-mumble_17.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-11-turnkey-mumble_17.1-1_amd64.tar.gz.hash debian-11-turnkey-mumble_17.1-1_amd64.tar.gz: OK $ sha512sum -c debian-11-turnkey-mumble_17.1-1_amd64.tar.gz.hash debian-11-turnkey-mumble_17.1-1_amd64.tar.gz: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmM0CTYACgkQHkh6RjHW /rZbzA//XbINz98t2q8l9oCCHVLboMKkjy6ckgKiO8lPCx8jsYzzKA3aCSkS2FY3 8OYXMulYX5D6W+Ok/JEsfVYVqj4W5APDN0uOMX4Wq0UAoT7rysuTou6HRxughYf1 ZSnxRlfF1n4FbtAbAha19AxjpYGoQxt9rzhhXKWSC9ftSC4GQJ9wWbg+aE+FiILM Dm/AwXp0tgVUHQtutL3qCh8zBky8QLGc09QXC4LfUKr6KETg6PfbLj9cABONQcPY X2sRD4erEAMCmcvzxipSYzFQa6UG98hlSZgtYPVxxqG3mK5wnwgvDcsbJneMA+Ha RFuBD/JGF6Xo4qnksB9pdL2D8GU2u/unRmTM2kN7X6dKpIYYQsxBr0qhmbyPvIM/ HXLJCY/mvbrOPKkYI97rWyI1NX04O10brePoR7ArS9wCzk3W2iZu8gKwMrMBt50R 9NyzkPJ5rcxe6m0A58OIz0NuxwNRr67nutgD/HK52IW+9FFs6X1Vc7EqBpXZPmyJ JNLYvcB2FnBkD6vF5zWZ5gA9l8GiI+lA1aRcZcrOzWnxq+efmGulYGWlbk2ZdA/9 LTRJVgL9LcoGODlhNGOLDq1tQLp9J3MJBRgbxYkSz/y1QEnMg1sU7oMcP21a7LM/ f3Y8ihts3qgBYtzHhSMAAWiQPOLxg27b8C0yX/izpHds9tQx554= =6JT2 -----END PGP SIGNATURE-----