-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl | gpg --import $ gpg --list-keys --with-fingerprint release-bullseye-images@turnkeylinux.org pub rsa4096 2021-08-04 [SC] [expires: 2041-07-30] E10F 6567 0C8E BE42 ED0C 3A49 CCA5 1174 468F 9073 uid [ unknown] TurnKey GNU/Linux Bullseye Images (GPG signing key for TurnKey Linux Bullseye Images) sub rsa4096 2021-08-04 [S] [expires: 2041-07-30] $ gpg --verify turnkey-asp-net-core-17.1-bullseye-amd64.iso.hash gpg: Signature made using RSA key ID E10F65670C8EBE42ED0C3A49CCA51174468F9073 gpg: Good signature from "0" 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum turnkey-asp-net-core-17.1-bullseye-amd64.iso 1b53bb4d9dcc302fee1f0fb690f4eb34c69a1c26107e30365ba297215b73c1a9 turnkey-asp-net-core-17.1-bullseye-amd64.iso $ sha512sum turnkey-asp-net-core-17.1-bullseye-amd64.iso c23ad8e379f2a25107f5cb52595db8669400f79adeadf187c99be1350691af507690f40a91d8f06cbb79c3848ee069c5a999a4e2f5a4d01041d5294d7bc8376e turnkey-asp-net-core-17.1-bullseye-amd64.iso Note, you can compare hashes automatically:: $ sha256sum -c turnkey-asp-net-core-17.1-bullseye-amd64.iso.hash turnkey-asp-net-core-17.1-bullseye-amd64.iso: OK $ sha512sum -c turnkey-asp-net-core-17.1-bullseye-amd64.iso.hash turnkey-asp-net-core-17.1-bullseye-amd64.iso: OK Final note, when checking SHAs automatically, please ignore warning noting that some lines are improperly formatted. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3YP+u+JWuSop/BuCHkh6RjHW/rYFAmKAx+4ACgkQHkh6RjHW /rbmHA/9Geqy/YbhxveigqxEI/lgYIyCQDtteteFBi4BBY2KLPugmTtGbaUFqJUW JDr8Wyd5j4xNbZ/rRShGoOR9Hv1J1GhZbNE4CL2swlblg4UWnTteKrJlApHVBBdT 9AHFjH8rN3Z97U9wSX+F1RcdY+8+I1BCAuuiyS/wBnzsY6ER2zlk9sf7tJVMjH7i nqzrJZ3TWLZXOGZ2d1KKwlf/3hTsk4dBFjer4vOSdhR2FG5wNEYFuL5BGZSxHagH 3/27VKugT7gkE5sqHkoux6aPzogduskOLYX3zccSzhEpP+aN5HBZLqq5KrhMDii8 4DOLo31mNyMh6K6sdYbaqI/c6qCw7rZAz6Wgl7QQZ4YrImt6lA6W2r0vHVGEXTQG nlo/XmS2saGGGEALEPtl4OcIWXrVPyb1D+NEKQAKXSiw2hJq9JvpOpE6/5BmHjeh ktGjillsyiK4hBT5JTngCPJVjS7m1rXP5ZhXRlx0s82hkRYEGb6sXhXmlv2e81+P MYOpT6eRzSeY73BnPRjRP763/e3Kom2czxXrqNkPgzsIjR+KNHjrB63tdZDvMwHt /chXEveYoykkDP45b6eM3hlz+adZZf8ZKVC2zArZQ5fV02Rd5uLGO92KUHNqpQ+g HO1Pf9Nq0Cs12EppJLHJIn9hvfYvEpHsGvSL4KxDfXrE5I9wEeQ= =e9f2 -----END PGP SIGNATURE-----