Signatures & Verification

Always verify downloads with SHA256 checksums and our PGP signing key before installing.

Fingerprint:

4DEA 38C5 997D 4B25 2730  2C2F 7017 AF76 172C 4235

Continuous (no spaces):
4DEA38C5997D4B2527302C2F7017AF76172C4235

The signature is made by the key with the fingerprint shown on this page.

1) Import the public key

curl -sS https://www.asicoin.org/signatures/asicoin-release.asc | gpg --import
gpg --fingerprint 4DEA38C5997D4B2527302C2F7017AF76172C4235

2) Verify the signed checksum file

gpg --verify SHASUMS256.txt.asc SHASUMS256.txt

3) Verify the file(s) you downloaded

sha256sum -c SHASUMS256.txt

Expected output includes “OK” for each file. If you see a BAD signature or a mismatched checksum, do not install.

Download Targets (examples)