-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 If you wish to verify the integrity of these downloads, use the following in a terminal: $ shasum -a 256 /path/to/installer/file The resulting text should match the checksum for the file shown below. This file has been signed with a digital signature. If you wish to confirm that no modifications have been made by third parties, first fetch the packaging key from GitHub: $ curl https://raw.githubusercontent.com/dae/anki/master/pkgkey.asc | gpg --import Then verify this file, eg: $ gpg --verify /path/to/checksum/file 2>&1 | grep Good If the file is unchanged, you should see: gpg: Good signature from "Anki Signatures " [unknown] SHA256 checksums follow: e4535f040424fc75d0eba6a6c1009214a58acc188deab2869ab2091226faeb93 anki-2.1.38-linux.tar.bz2 27c60faec25136b37ce01d7ac6be790cd6acd87a2cb948f6077e4128490034cf anki-2.1.38-mac.dmg 960244cc4abeb95d94343e3748709d0d18d80fc63258c8839e60c82d836eb704 anki-2.1.38-windows.exe -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHKk0tAuE9EgxbOL8wKNRl5s347kFAl/mhO0ACgkQwKNRl5s3 47nXIQ//Qvks+UQOlz2aCBEUnbE8R7JiH1J7tkgqJ/1faAB0YquoNSbn/N5HBycE sRC8U8Bdv1ZRBRHjiOxC5O14N841SeChCGQXeWzJPu6HC3Xm9/C7GYWVUxOxUkby 1xdifryT836F8GR4me2ACDsAzBK7oyaaNcDrH9p4UJBYsAalmRIvnH7nQFONGoTv UX/GeEq/930LCdBSv8yY6jKEmAJdi36OPDEahD2sxuarZMEANaHIyQT2xFTL5rfp 57Qb4O/2j+hxJpDCdXMv6YpykXnLQ7u4zgRTUJUO2Z2bia5u9LIHtq1qzw+/Nh2q KQXQ68ysvU0UU9PKV8ez3UVchE2ExpSoKa2z60ISP8LtywuFLD78D4CDdSRuMmYI CvzYydyjeSNiaP6bQkFKnXiqjI0uIrUQoZ9YFo43ZSyHEYZK5+5RQRxUfYc13ijt M+BrSWW7D7rZ8/En0K29N2q8vnXkCGhPCj/V7taiTpnkYDLNVVE3X39NBDN5QkHc YUZuLhBPmQvxqcPpUgoVu8mEHvuN0ApHy603582ib9Vg12gaz9IBRjAy473Qk5aw Fc9jBM3sThV8JlitLmc8eE6xST9LmhfWv2kzZRoKErH9UfTAuEKdUtv6pl5ZhsIC isauMIPZ+sf+eXs8eMm4POdqiO/Jg/6C0h5eaZ4z2YppKC6F7xE= =0tYq -----END PGP SIGNATURE-----