Verified disk images

SHA-256 e94859a83b305cae5125dc9c6080ced040c59d099ea7381e7f300fd1dba87a17Copy

Checksum read from SHA256SUMS, signature SHA256SUMS.sign verified with key DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B (Debian CD signing key <debian-cd@lists.debian.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: www.debian.org/CD/verify

License: free software (DFSG) · File : debian-live-13.7.0-amd64-gnome.iso

SHA-256 a7ef94ac2fb9a7fec454552abd629b7cc9d5155c886165a45649f5ce6167e355Copy

Checksum read from SHA256SUMS, signature SHA256SUMS.sign verified with key DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B (Debian CD signing key <debian-cd@lists.debian.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: www.debian.org/CD/verify

License: free software (DFSG) · File : debian-13.7.0-amd64-netinst.iso

SHA-256 6e93fa1759bd9d4b0fc11e938987de6967ee7de5297dac1be27c3a75cc17024bCopy

Checksum read from SHA256SUMS, signature SHA256SUMS.sign verified with key DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B (Debian CD signing key <debian-cd@lists.debian.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: www.debian.org/CD/verify

License: free software (DFSG) · File : debian-13.7.0-arm64-netinst.iso

SHA-256 601e30fbf5d97759367c632e2c33630665039b7e2158fd068403da3ccf1bda1fCopy

Checksum read from SHA256SUMS, signature SHA256SUMS.gpg verified with key 8439 38DF 228D 22F7 B374 2BC0 D94A A3F0 EFE2 1092 (Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: ubuntu.com/tutorials/how-to-verify-ubuntu

License: free software · File : ubuntu-26.04.1-desktop-amd64.iso

SHA-256 a081ab202cfda17f6924128dbd2de8b63518ac0531bcfe3f1a1b88097c459bd4Copy

Checksum read from sha256sum.txt, signature sha256sum.txt.gpg verified with key 27DE B156 44C6 B3CF 3BD7 D291 300F 846B A25B AE09 (Linux Mint ISO Signing Key <root@linuxmint.com>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: linuxmint.com/verify.php

License: free software · File : linuxmint-22.3-cinnamon-64bit.iso

SHA-256 1620295f6a00c27c3208f0c00b8ece4eab1ec69b9002152d97488bf26a426ddfCopy

Checksum read from Fedora-Workstation-44-1.7-x86_64-CHECKSUM (signed file), signature verified with key 36F6 12DC F27F 7D1A 48A8 35E4 DBFC F71C 6D9F 90A6 (Fedora (44) <fedora-44-primary@fedoraproject.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: fedoraproject.org/security

License: free software · File : Fedora-Workstation-Live-44-1.7.x86_64.iso

SHA-512 94411793a1878b3558211c8bbe4f3823c3c5212cc2dd9f9e4532a18be7eddd3be14db5a3bb47a2f36dd957e190ea706cd45af16bce218dfc00f71e64a8469971Copy

Checksum read from Leap-16.0-offline-installer-x86_64.install.iso.sha512, signature Leap-16.0-offline-installer-x86_64.install.iso.sha512.asc verified with key AD48 5664 E901 B867 051A B15F 35A2 F86E 29B7 00A4 (openSUSE Project Signing Key <opensuse@opensuse.org> (Leap 16)), on 2026-09-26, from 2 separate networks.

Key published by the vendor: download.opensuse.org/distribution/leap/16.0/repo/oss/repodata/repomd.xml.key (key published in the official Leap 16.0 repository) and en.opensuse.org/openSUSE:Download_help

License: free software · File : Leap-16.0-offline-installer-x86_64.install.iso

SHA-256 be8458032f8105e60ee2a3067f950b6e3c007ee51b38dac50e8b48e765561c91Copy

Checksum published by the vendor in json, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): archlinux-2026.09.01-x86_64.iso.sig.

License: free software · File : archlinux-2026.09.01-x86_64.iso

SHA-256 6dbefacc95e3b556c19c48e8bae39b8b505e2d3a1aba0bfb7ab62b036c3d2ba3Copy

Checksum read from SHA256SUMS, signature SHA256SUMS.gpg verified with key 827C 8569 F251 8CC6 77FE CA1A ED65 462E C8D5 E4C5 (Kali Linux Archive Automatic Signing Key (2025) <devel@kali.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: www.kali.org/docs/introduction/download-official-kali-linux-images/

License: free software · File : kali-linux-2026.2-installer-amd64.iso

SHA-256 49e90e694d1b3dedd47f94afbe99dfdd5afb41c8462b638bbd332929769c773aCopy

Checksum read from SHA256SUMS, signature SHA256SUMS.gpg verified with key 827C 8569 F251 8CC6 77FE CA1A ED65 462E C8D5 E4C5 (Kali Linux Archive Automatic Signing Key (2025) <devel@kali.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: www.kali.org/docs/introduction/download-official-kali-linux-images/

License: free software · File : kali-linux-2026.2-live-amd64.iso

SHA-256 8c4e63c7c47a000335bf2e66158c0d062c063619599e45d717759d8f1621f468Copy

Checksum published by the vendor in latest.json, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): tails-amd64-7.13.img.sig.

License: free software · File : tails-amd64-7.13.img

SHA-256 cacb025f452ad010257dd5d3ba7bf7cb1bdfde50e8e583670d604d0bb6336682Copy

Checksum published by the vendor in latest.json, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): tails-amd64-7.13.iso.sig.

License: free software · File : tails-amd64-7.13.iso

SHA-256 6ab99dee2c7a7b2c32053d3531084aaf3af703815842b67f90a87ba324527db6Copy

Checksum read from Qubes-R4.3.1-x86_64.iso.DIGESTS, signature Qubes-R4.3.1-x86_64.iso.DIGESTS.asc verified with key F3FA 3F99 D628 1F7B 3A3E 5E87 1C3D 9B62 7F3F ADA4 (Qubes OS Release 4.3 Signing Key), on 2026-09-26, from 2 separate networks.

Key published by the vendor: www.qubes-os.org/security/verifying-signatures/ (release key, signed by the master key 427F 11FD 0FAA 4B08 0123 F01C DDFA 1A3E 3687 9494)

The file itself carries a vendor signature (OpenPGP): Qubes-R4.3.1-x86_64.iso.asc.

License: free software · File : Qubes-R4.3.1-x86_64.iso

SHA-256 cc8a95cde20f6ced61a322420de00f10cc3c90ced545daa46cb9c1a117f1d927Copy

Checksum read from SHA256SUMS, signature SHA256SUMS.gpg verified with key 8439 38DF 228D 22F7 B374 2BC0 D94A A3F0 EFE2 1092 (Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: ubuntu.com/tutorials/how-to-verify-ubuntu

License: free software · File : ubuntu-26.04.1-live-server-amd64.iso

SHA-256 ae20c06bea746913cadea7d80463e13f4bf55bee4df2918111c921c674b70283Copy

Checksum read from Fedora-Server-44-1.7-x86_64-CHECKSUM (signed file), signature verified with key 36F6 12DC F27F 7D1A 48A8 35E4 DBFC F71C 6D9F 90A6 (Fedora (44) <fedora-44-primary@fedoraproject.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: fedoraproject.org/security

License: free software · File : Fedora-Server-netinst-x86_64-44-1.7.iso

SHA-256 20c026e3a788bfb75fc8b50a54bcc12aee85e3c75909740bba6a6f4563d63296Copy

Checksum published by the vendor in latest-releases.yaml, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): alpine-standard-3.24.2-x86_64.iso.asc.

License: free software · File : alpine-standard-3.24.2-x86_64.iso

SHA-256 3ab424762af704b2c2a9e57df1dc37f982af260071504d977f2fb96822e7130bCopy

Checksum published by the vendor in latest-releases.yaml, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): alpine-virt-3.24.2-x86_64.iso.asc.

License: free software · File : alpine-virt-3.24.2-x86_64.iso

SHA-256 16ca9c96cdb221ba6e1f68579f21bd69fd8da81c6a921d9068949796f91c8febCopy

Checksum read from Rocky-10-latest-x86_64-dvd.iso.CHECKSUM, signature Rocky-10-latest-x86_64-dvd.iso.CHECKSUM.asc verified with key FC22 6859 C086 0BF0 DDB9 5B08 5B10 6C73 6FED FC85 (Release Engineering (Rocky Linux 10) <releng@rockylinux.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: rockylinux.org/keys

License: free software · File : Rocky-10-latest-x86_64-dvd.iso

SHA-256 aac6ac3ce781b91a91ce78463405f66c611a5dca4b3840c79e5e01d97302f6c8Copy

Checksum read from Rocky-10-latest-x86_64-minimal.iso.CHECKSUM, signature Rocky-10-latest-x86_64-minimal.iso.CHECKSUM.asc verified with key FC22 6859 C086 0BF0 DDB9 5B08 5B10 6C73 6FED FC85 (Release Engineering (Rocky Linux 10) <releng@rockylinux.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: rockylinux.org/keys

License: free software · File : Rocky-10-latest-x86_64-minimal.iso

SHA-256 1b532f534231da0d1cd0ccae622bea6cd588d8a0d7b259f1f131501a6eed41a4Copy

Checksum read from CHECKSUM (signed file), signature verified with key EE6D B7B9 8F5B F5ED D9DA 0DE5 DEE5 C11C C2A1 E572 (AlmaLinux OS 10 <packager@almalinux.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: almalinux.org/security/

License: free software · File : AlmaLinux-10.2-x86_64-minimal.iso

SHA-256 2fb299deac3929253712c9c3dfc9237edbe70af83c8848467616b771a1d5453eCopy

Checksum published by the vendor in proxmox-backup-server_4.2-1.iso.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): proxmox-backup-server_4.2-1.iso.asc.

License: AGPL-3.0 · File : proxmox-backup-server_4.2-1.iso

SHA-256 79402f6398c50a76fca66a32c3c0a50da3f71d35c1d7a1bea022e4b1c6c864d6Copy

Checksum published by the vendor in proxmox-mail-gateway_9.1-1.iso.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): proxmox-mail-gateway_9.1-1.iso.asc.

License: AGPL-3.0 · File : proxmox-mail-gateway_9.1-1.iso

SHA-256 4e88fe416df9b527624a175f24c9aa07c714d3332afb1ee3dbf3879573ef2c6cCopy

Checksum published by the vendor in proxmox-ve_9.2-1.iso.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): proxmox-ve_9.2-1.iso.asc.

License: AGPL-3.0 · File : proxmox-ve_9.2-1.iso

SHA-256 54ce9441ce66966a392e28f63604ca3c2c083d0bec4db7bb5af2f74f7a007c8eCopy

Checksum published by the vendor in TrueNAS-SCALE-25.10.7.iso.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

License: open source (image built by iXsystems) · File : TrueNAS-SCALE-25.10.7.iso

SHA-256 6ba3633d9c0f96d82c792015a45f4b8aac45ea8fa2bdba3c5e534d0c90a4f08cCopy

Checksum read from OPNsense-26.1.6-checksums-amd64.sha256, signature OPNsense-26.1.6-checksums-amd64.sha256.sig verified (OpenSSL) with key D882 8C06 58FF B5E9 00A3 1269 D709 1B40 2497 D570 6B9B E179 E01E D8C8 8A0D 49D8 (OPNsense 26.1 (clé RSA 4096, fichier OPNsense-26.1.pub)), on 2026-09-26, from 2 separate networks.

Key published by the vendor: docs.opnsense.org/manual/install.html (the key is published on the official mirrors listed by opnsense.org/download; fingerprint read on 2026-09-26 from mirror.dns-root.de)

The file itself carries a vendor signature (OpenSSL, uncompressed image): OPNsense-26.1.6-dvd-amd64.iso.sig.

License: BSD-2 · File : OPNsense-26.1.6-dvd-amd64.iso.bz2

SHA-256 cf8deca3033b66138930d417c879cb93b7930d1ca8dabd7e1aea914f9a551f4aCopy

Checksum read from OPNsense-26.1.6-checksums-amd64.sha256, signature OPNsense-26.1.6-checksums-amd64.sha256.sig verified (OpenSSL) with key D882 8C06 58FF B5E9 00A3 1269 D709 1B40 2497 D570 6B9B E179 E01E D8C8 8A0D 49D8 (OPNsense 26.1 (clé RSA 4096, fichier OPNsense-26.1.pub)), on 2026-09-26, from 2 separate networks.

Key published by the vendor: docs.opnsense.org/manual/install.html (the key is published on the official mirrors listed by opnsense.org/download; fingerprint read on 2026-09-26 from mirror.dns-root.de)

The file itself carries a vendor signature (OpenSSL, uncompressed image): OPNsense-26.1.6-vga-amd64.img.sig.

License: BSD-2 · File : OPNsense-26.1.6-vga-amd64.img.bz2

SHA-256 fa27646f05a1440fd26ffbb85e06a50bc86e128242a4e9cb7bb3ea76e1aa5fd9Copy

Checksum published by the vendor in CHECKSUM.SHA256-FreeBSD-15.1-RELEASE-amd64, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

License: BSD · File : FreeBSD-15.1-RELEASE-amd64-disc1.iso

The project signs its checksums in the release announcement (PGP e-mail), not in a file next to the images.

SHA-256 26c6d5de1156e7a99df920d047578b504c4899865d91b1156b1de1a0c5239eaeCopy

Checksum published by the vendor in CHECKSUM.SHA256-FreeBSD-15.1-RELEASE-amd64, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

License: BSD · File : FreeBSD-15.1-RELEASE-amd64-memstick.img

The project signs its checksums in the release announcement (PGP e-mail), not in a file next to the images.

SHA-256 61d95799550aac32788bb3cacc3d471dcc860f8053ce989dec4aecc388b799ddCopy

Checksum published by the vendor in 2026-09-15-raspios-trixie-arm64.img.xz.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): 2026-09-15-raspios-trixie-arm64.img.xz.sig.

License: free software + proprietary firmware · File : 2026-09-15-raspios-trixie-arm64.img.xz

SHA-256 cdf4f3bfac35ae947b46e4e767f935453810549779ac3290e05a6754aee627e5Copy

Checksum published by the vendor in 2026-09-15-raspios-trixie-arm64-lite.img.xz.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): 2026-09-15-raspios-trixie-arm64-lite.img.xz.sig.

License: free software + proprietary firmware · File : 2026-09-15-raspios-trixie-arm64-lite.img.xz

SHA-256 3079458d926a37d3533e5d5caeb61b6e49c2dc69e2c97e0332ef37986bb3414fCopy

Checksum read from SHA256SUMS, signature SHA256SUMS.gpg verified with key 54C0 821A 4871 5DAF D61B FCAF 6678 57D0 4559 9AFD (DRBL Project (Diskless Remote Boot in Linux) <drbl@clonezilla.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: identity published on hkps://keyserver.ubuntu.com; signature published on free.nchc.org.tw, the project's host (NCHC); the vendor does not publish the fingerprint on its site

License: GPL · File : clonezilla-live-3.3.3-37-amd64.iso

SHA-256 5686226c04a58436f2f5a58211bfde7109e806e0236ae821f1bc6559788bf705Copy

Checksum read from CHECKSUMS.TXT, signature CHECKSUMS.TXT.gpg verified with key EB1D D5BF 6F88 820B BCF5 356C 8E94 C9CD 163E 3FB0 (Steven Shiau (In Freedom We Trust) <steven@stevenshiau.org>), on 2026-09-26, from 2 separate networks.

Key published by the vendor: identity published on hkps://keyserver.ubuntu.com; signature published on gparted.org; the vendor does not publish the fingerprint on its site

License: GPL · File : gparted-live-1.8.1-6-amd64.iso

SHA-256 ad4d670b72859d887c7960142a9a9d36a3e50446694a035e254442f65d6e7572Copy

Checksum published by the vendor in systemrescue-13.02-amd64.iso.sha256, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

The file itself carries a vendor signature (OpenPGP): systemrescue-13.02-amd64.iso.asc.

License: GPL · File : systemrescue-13.02-amd64.iso

SHA-256 93530005d6ac6a85aa2a49c68604a43c25794ecccf796c4f8849a73a8001be9aCopy

Checksum published by the vendor in sha256sum.txt, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

License: GPL-2.0 · File : mt86plus_8.10_x86_64.iso.zip

SHA-256 7fb4ed08cef6a6b4d39dd19260d8c80291a78dfdf9af7d461571e23cbbc43805Copy

Checksum published by the vendor in sha256.txt, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

License: GPL-3.0 · File : ventoy-1.1.17-linux.tar.gz

SHA-256 d250e97a7595fdac4f97debc630d7a8da942319274a76cb32384596b659dbaebCopy

Checksum published by the vendor in sha256.txt, read on 2026-09-26 from 2 separate networks. That checksum file carries no verifiable signature.

License: GPL-3.0 · File : ventoy-1.1.17-windows.zip