...

This page contains release information and downloadable deliverables for the different releases of 9.0 1 For each release the following downloadable deliverables are information is available:

• Release Notes - Contains information about the contents of the release, important information and known issues. You must read through this information before starting any installation or upgrade.

• Bug Fix Appendix - Contains information about bug fixes included in the release.

• GitHub Link for Downloads - Link to the release in GitHub where you can download the release package and a signature file for package verification.

...

Verify Downloaded Package

...

There is a signature file in the release package that you can use to verify the main package. 

To verify the main package, download the *.tgz file and the *.sig file, and run the following commands:

$ cat >> dr-cosign.pub << EOF
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEU95nqvgnrhrxLLU33rK6lt5qQZVU
AUUEor1i8IGMQQnUOrnH0aRHv5i2AxX3vlgHIRtCUWyxtY52GSakFsNQMQ==
-----END PUBLIC KEY-----
EOF

$ cosign verify-blob --key dr-cosign.pub --signature <download_path>/<version>.sig <download_path>/<version>.tgz

You should receive the following output if verification succeeded:

Verified OK

To obtain your release, please, visit Our Download site.