# How to verify 9.0 iso

**URL:** <https://forums.rockylinux.org/t/how-to-verify-9-0-iso/6576>\
**Category:** Rocky Linux Help & Support\
**Created:** [July 14, 2022, 8:21pm UTC](https://forums.rockylinux.org/t/how-to-verify-9-0-iso/6576 "2022-07-14T20:21:23Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [July 14, 2022, 9:12pm UTC](https://forums.rockylinux.org/t/how-to-verify-9-0-iso/6576/6 "2022-07-14T21:12:19Z")

</div>

All checksums will be here: [GitHub - rocky-linux/checksums: Contains checksums of images, ISO's, and so on for Rocky Linux](https://github.com/rocky-linux/checksums)

The checksums will be here and committed by those of us with GPG keys that have [rockylinux.org](http://rockylinux.org) / [resf.org](http://resf.org) email addresses. The reason why we don’t have CHECKSUM.sig anymore for 9 is because of the new build system and how keykeeper works. For security reasons, we decided that we wouldn’t allow signing files adhoc outside of the build system and instead provide a git repo and a mirror of it with signed commits of the checksums.

There was another poster who actually brought this up initially since our website nor documentation pointed out the CHECKSUM.sig files to begin with. We ultimately decided that using a git repo (and linking it to our website’s download page, coming soon) would make a bit more sense.

While this is mostly for mirrors or those who are curious/explorers into the repository structure of Rocky Linux, we explain it a bit in our metadata [README](http://dl.rockylinux.org/pub/rocky/9.0/metadata/README) since we knew these questions would arise.

When we get 8 into the mix of the new build system, the same thing will likely occur where there is no longer CHECKSUM.sig files, but that is down the road.

---

_[View the full topic](https://forums.rockylinux.org/t/how-to-verify-9-0-iso/6576)._
