# \[guide\] Verify checksum signatures! **URL:** \ **Category:** Rocky Linux Help & Support\ **Tags:** guide\ **Created:** [February 1, 2025, 11:12pm UTC](https://forums.rockylinux.org/t/guide-verify-checksum-signatures/17392 "2025-02-01T23:12:19Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![charles9](https://avatars.discourse-cdn.com/v4/letter/c/3d9bf3/32.png) [@charles9](https://forums.rockylinux.org/u/charles9)\ **Post date:** [February 1, 2025, 11:12pm UTC](https://forums.rockylinux.org/t/guide-verify-checksum-signatures/17392/1 "2025-02-01T23:12:19Z")
This guide is for users who want to manually verify Rocky Linux ISO images. This isn’t needed for RPMs since GPG keys are automatically checked with your system’s keychain. 1. Open up [rocky-linux/checksums](https://git.resf.org/rocky-linux/checksums) on the RESF Forgejo. 2. Select your major version, such as `rocky-linux-9`. 3. Then, select your minor version, such as `9.5`. 4. Select the appropriate file, such as `9.5-x86_64.ISO.checksum`. 5. Click the green button with an ID, next to a padlock. 6. Open up [Ubuntu’s keyserver](https://keyserver.ubuntu.com/) 7. Type the GPG key ID displayed (hint: its the uppercase ID, not the shortened lowercase one) on RESF Forgejo, and click Search Key. 8. Once the results are considered trustworthy, go back to RESF Forgejo, and back again, and verify the hash like usual. [Here](https://files.catbox.moe/mbyklz.mp4) is a simple video tutorial. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\ **Post date:** [April 2, 2025, 11:13pm UTC](https://forums.rockylinux.org/t/guide-verify-checksum-signatures/17392/2 "2025-04-02T23:13:20Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.