-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import $ gpg --list-keys --with-fingerprint release@turnkeylinux.com pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D uid Turnkey Linux Release Key $ gpg --verify debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key " For extra credit you can validate the key's authenticity at: https://keybase.io/turnkeylinux 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz 11643f035c926411cc58e9987d858adee88d910a1670a7ca12350fcb3e4f6014 debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz $ sha512sum debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz 87ca829d50a8f0c2cfe709a3bba6c4a98e24276417116b1c8e01fe20269330f51a7ad89dab701b2e18e071e01e550403f5318b29a2896fd01cf47182d2e9b8d0 debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz.hash debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz: OK $ sha512sum -c debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz.hash debian-9-turnkey-mayan-edms_15.1-1_amd64.tar.gz: OK -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlxhNvkACgkQhcJelaFu uU0Hrgf/aMVoyBtTQM46K1r0GvO8W8PYN/Lym+YKm8oVXSpDk0O+aTdR8hJ+dRO3 1ayabN7Vk4yl4uQep8p1qdHdada2WMMWZ4WOQdbDFUgoHUqBtb3maW7VQsaE6vwe ysgsEkBc8c9J3DR1wCnDTCFCtq0d1RUlih7mZFJBUOnUUKM2ITLvZ47AGc2gJUNH mBL25cR3ApJnmp07MRD2xHp4t9D62D2uWYjgV4TGD4CDFYBkpy3cWlJyFH2GQ4VU C6UM4lw23sI+GqnlI1hps5hcNp62lp95CtcakmRR93MFzoMZPJ66PVHQIxaThXRU nTtehTPIWhF5FpmFOjzAByl41iuvag== =6QDs -----END PGP SIGNATURE-----