Doesn't work for me either. When I click the button, a download message flashes shortly but the request fails with Error 400.
Copied request as cURL fails aswell:
curl 'https://releases.grapheneos.org/tegu-stable' \
-H 'sec-ch-ua-platform: "Linux"' \
-H 'Referer;' \
-H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36' \
-H 'sec-ch-ua: "Chromium";v="139", "Not;A=Brand";v="99"' \
-H 'sec-ch-ua-mobile: ?0' ;
curl 'https://releases.grapheneos.org/tegu-install-2025081400.zip' \
-H 'accept: */*' \
-H 'accept-language: de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7' \
-H 'if-range: "689de7f0-5ee8113b"' \
-H 'origin: https://grapheneos.org' \
-H 'priority: u=1, i' \
-H 'range: bytes=105258-105258' \
-H 'sec-ch-ua: "Chromium";v="139", "Not;A=Brand";v="99"' \
-H 'sec-ch-ua-mobile: ?0' \
-H 'sec-ch-ua-platform: "Linux"' \
-H 'sec-fetch-dest: empty' \
-H 'sec-fetch-mode: cors' \
-H 'sec-fetch-site: same-site' \
-H 'user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36' ;
curl 'https://releases.grapheneos.org/tegu-install-2025081400.zip' \
-H 'accept: */*' \
-H 'accept-language: de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7' \
-H 'if-range: "689de7f0-5ee8113b"' \
-H 'origin: https://grapheneos.org' \
-H 'priority: u=1, i' \
-H 'range: bytes=105258-105258' \
-H 'sec-ch-ua: "Chromium";v="139", "Not;A=Brand";v="99"' \
-H 'sec-ch-ua-mobile: ?0' \
-H 'sec-ch-ua-platform: "Linux"' \
-H 'sec-fetch-dest: empty' \
-H 'sec-fetch-mode: cors' \
-H 'sec-fetch-site: same-site' \
-H 'user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36'
a simple curl https://releases.grapheneos.org/tegu-install-2025081400.zip -O works fine and it verifies fine aswell:
ssh-keygen -Y verify -f allowed_signers -I contact@grapheneos.org -n "factory images" -s tegu-install-2025081400.zip.sig < tegu-install-2025081400.zip
Good "factory images" signature for contact@grapheneos.org with ED25519 key SHA256:AhgHif0mei+9aNyKLfMZBh2yptHdw/aN7Tlh/j2eFwM