Ubuntu privacy remix
All this is of little use if the whole image has been replaced by a manipulated version, however. To prevent this, the md5sum.txt and sha1sum.txt files, which list the checksums, are signed and can be verified from the root directory of UPR via the maintainer's public key: