How to download Bitcoin Core and make sure it is not tampered with

---

This is a summary of what I learnt from here.

To get the latest bitcoin code:

wget https://bitcoin.org/bin/bitcoin-core-0.19.0.1/bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz

Before typing in this code, make sure 0.19.0.1 is the latest version. By the time you read this, there might be a newer version available here.

Once the file is downloaded, you can get the signature by typing:

sha256sum bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz

I got the following when I typed the above:

732cc96ae2e5e25603edf76b8c8af976fe518dd925f7e674710c6c8ee5189204  bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz

Which coincides with this:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

c258c6416225afb08c4396847eb3d5da61a124f1b5c61cccb5a2e903e453ce7f  bitcoin-0.19.0.1-aarch64-linux-gnu.tar.gz
c9335ab5286b66b3fd93be5cd21695885765cb2ffea2a90d92bf99b43f549787  bitcoin-0.19.0.1-arm-linux-gnueabihf.tar.gz
94d1b581dfd21dc64e5510c3b31d6592aed9d33851db5795fb549354f00b3e72  bitcoin-0.19.0.1-i686-pc-linux-gnu.tar.gz
a64e4174e400f3a389abd76f4d6b1853788730013ab1dedc0e64b0a0025a0923  bitcoin-0.19.0.1-osx64.tar.gz
1a8865ac84de9710633ad89b3f6b7c08281a0298d47e8ce7d4f5bb52f765f06e  bitcoin-0.19.0.1-osx.dmg
3e35dccc55b6de206a9c9b21c2d10fb79a184e817906bf75a6f47b57a3f1df66  bitcoin-0.19.0.1-riscv64-linux-gnu.tar.gz
7ac9f972249a0a16ed01352ca2a199a5448fe87a4ea74923404a40b4086de284  bitcoin-0.19.0.1.tar.gz
4abca9419e83581209a3654a33da504998cf2f470993ee6d71f6b47fefe631a0  bitcoin-0.19.0.1-win64-setup.exe
7706593de727d893e4b1e750dc296ea682ccee79acdd08bbc81eaacf3b3173cf  bitcoin-0.19.0.1-win64.zip
732cc96ae2e5e25603edf76b8c8af976fe518dd925f7e674710c6c8ee5189204  bitcoin-0.19.0.1-x86_64-linux-gnu.tar.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=4m4p
-----END PGP SIGNATURE-----