http://h2zkj5xeycxb2esnyqeabuuo6ui6jlkdb72qjfi2hu3y3h5ilpmjphid.onion/wiki/Keysigning/index.html
The SHA256 files will be signed with public key 0x1880283c, which can be downloaded from keyring.debian.org or db.debian.org. To verify the signuture of the SHA256 files,
download anibal's key from db.debian.org, e.g.: finger anibal/
[email protected] | gpg --import And then run gpg with the verify option (using ksp-dc7.txt.sha256.asc as an example): gpg --verify ksp-dc7.txt.sha256.asc Verify that the fingerprint of your key in ksp-dc7.txt is correct.