-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/master/keys/tkl-buster-images.asc | gpg --import $ gpg --list-keys --with-fingerprint release-buster-images@turnkeylinux.org pub rsa4096 2020-02-05 [SC] [expires: 2040-01-31] A8B2 EF42 8781 9B03 D351 6CCA 7623 1C20 425E 9772 uid [ unknown] TurnKey GNU/Linux Buster Images (GPG signing key for TurnKey Linux Buster Images) sub rsa4096 2020-02-05 [S] [expires: 2040-01-31] $ gpg --verify turnkey-asp-net-core-16.1-buster-amd64.iso.hash gpg: Signature made using RSA key ID A8B2EF4287819B03D3516CCA76231C20425E9772 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-asp-net-core-16.1-buster-amd64.iso 799e6b57dc9f07f31252d7994eb0d8420faad5773e46d56d36ca39298e3ef8c7 turnkey-asp-net-core-16.1-buster-amd64.iso $ sha512sum turnkey-asp-net-core-16.1-buster-amd64.iso fd170f36b50d49709747e2e0a94696708f279863432c281e5455c5b35956ae0adfa7538b086531a30abce7cf1ab4bffcfe85e73cbfcd8fcb8b678a184454c9f9 turnkey-asp-net-core-16.1-buster-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-asp-net-core-16.1-buster-amd64.iso.hash turnkey-asp-net-core-16.1-buster-amd64.iso: OK $ sha512sum -c turnkey-asp-net-core-16.1-buster-amd64.iso.hash turnkey-asp-net-core-16.1-buster-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8ZCki1TcVrLH8k3LrF6wBJPlvBwFAmBh2NYACgkQrF6wBJPl vBwh7Q/+MC6j5yLiOj0WLvTObGgmdbFhu/0FoyUbl4ync0W0OwwqaSQQfZHM718g qYTWtl1KkvBt/iS+9H/UDdU5930Vr/ta/38su3QW9OQyEt1mX2hLhlUNN0LbODcJ OipqXjnMQXSQLONdPvMKOEdB/jxxtMWI0ePG/i9G9SvIpg8QUFCPEEWsIwQROUw7 gA7J/xuHvKY+LdxjvgC4mD8bQRHd01SKZ/2Xv1LuKDB78Riyj/TmAZK+vbQIKZuF dhY1x2lKqhre1MttZYX+kPFPWO6jEm8lK610/WM66MU1FpORwpJyMEKXah2Zm5/Z sv5w46Nv1l1Dkq9cvPtOc68PYqGQTC3L1TkJLFnIvVHHhW4/bLwXYZQFiHhT+Vfx /RyHrAhlNU9wb6x4fWZAKHs4aSoc5pbUa20M+fJ7Cno9hVVDYfgW/wyW48pHmZLr ViurTM1ospbuyPdqBUetsEHMj++M88p9sBmR40hheBU+MfOLVc64P+DSK4Ud4Pcn kmU2t9IM/78fOgpdHS/Mg6GYlV1bdjmucWNbyQmW8Ay6ecQ2SL8GhQ1deYSOcwcy 82NZunga1CEHFmRgXbCbznJuRmBPaU/UAM15D7+qz7jDKWH9nmk5j/L0cJcy0MzH xOpLyQBNgExwfqzp8ilPUa1HzFriTS6NvJJ+CvNaViJF3Qd8g/8= =whm8 -----END PGP SIGNATURE-----