# Digitally Signed Releases
URL: https://docs.valsight.ai/digitally-signed-releases/
Description: All our releases are digitally signed using a GPG key to ensure authenticity and integrity. You can verify that the files you download have not been tampered…
All our releases are digitally signed using a GPG key to ensure authenticity and integrity. You can verify that the files you download have not been tampered with by checking the signature against our public key.

The public key has ID: A31F5ED57BD4386068186B4640D0B4DE7E47274F

[Valsight\_GmbH\_Releases\_-\_Level\_1.pub](https://vs-documentation-assets.fsn1.your-objectstorage.com/files/6189023283_Valsight_GmbH_Releases_-_Level_1.pub)

To verify a signature:

```
# Import the public key into the local key store
gpg --import Valsight_GmbH_Releases_-_Level_1.pub

# Verify the signature, replace X.X.X with version number
gpg --verify valsight-server.sig valsight-server-X.X.X.zip
```

> You must not re-import the Public Key each time you download a new release. In fact, for improved security, it is recommended to verify the correctness of the public key via a separate channel (Email, Phone) once and then keep the local, trusted version.