Tenzro release signing key Fingerprint (SHA-256 of the DER SubjectPublicKeyInfo of tenzro-release.pub): c88aaee70b3c0bf17a994bad44963a6a72359b2e1497df9a15a40ed099aeb72d Check the copy you downloaded: openssl pkey -pubin -in tenzro-release.pub -outform DER | sha256sum The key is a P-256 key created inside a TPM 2.0; it cannot be exported and each use needs a passphrase typed by the release signer. It signs SHA256SUMS. Verify with cosign 3.x: cosign verify-blob --key tenzro-release.pub --insecure-ignore-tlog=true --signature SHA256SUMS.sig SHA256SUMS The same fingerprint is published at https://tenzro.com/docs/verify-your-download and in docs/RELEASE-KEYS.md of the public repository (github.com/tenzro/tenzro-network). If they do not agree, stop and ask.