-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To ensure the image has not been corrupted in transmit or tampered with, perform the following two steps to cryptographically verify image integrity: 1. Verify the authenticity of this file by checking that it is signed with our GPG release key: $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import $ gpg --list-keys --with-fingerprint release@turnkeylinux.com pub 2048R/A16EB94D 2008-08-15 [expires: 2023-08-12] Key fingerprint = 694C FF26 795A 29BA E07B 4EB5 85C2 5E95 A16E B94D uid Turnkey Linux Release Key $ gpg --verify debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz.hash gpg: Signature made using RSA key ID A16EB94D gpg: Good signature from "Turnkey Linux Release Key " For extra credit you can validate the key's authenticity at: https://keybase.io/turnkeylinux 2. Recalculate the image hash and make sure it matches your choice of hash below. $ sha256sum debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz c558130a7f8e7bace19cf531e8944d22d340e50b4fafa6b4fd93265f9fbb1bdb debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz $ sha512sum debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz c5853f034e1453694cbfa2f06591bb5c8c1cd2b534286737fbc59b7618a9bded087390180dd831fb2772b859b5072c7b3586545cac2fac3fdbcf498d041dc18e debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz Note, you can compare hashes automatically:: $ sha256sum -c debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz.hash debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz: OK $ sha512sum -c debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz.hash debian-9-turnkey-dokuwiki_15.1-1_amd64.tar.gz: OK -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlxhNvgACgkQhcJelaFu uU1jFwf/VHKuJMsGYdN+CV3UQGJiGtLOJsIzWLHc1FxHJvtnHMAfr43tOA32OBWA JHpQ0IQfKsctaUhpdojn+YXQil2ozAkuBq477yxFy14Jhn2apmetJ69FQMg7qIF2 yqaL8hMSQLeK3hxQg87hZwVT5s6XqlZ9xkCsM9euMioKcL4gvrVva4us2o96KN1W trM44NPBMVv9ZC++322HdFEwcBlYHYFy5zeW6d4feMqo9gLXNhhaE2ISmtWjBJcG MmGmWZl568RXyOOWrt4yuuI62uLrHaw6sp6BwPG9aE9VaEjtuHPKJIwZZY7VUrOR k8TzGL1ThKxPvUnBurRwQOaTb1Idyg== =YgVy -----END PGP SIGNATURE-----