Using a Mirror

We recommend you use a mirror to download our release builds, but you must verify the integrity of the downloaded files using signatures downloaded from our main distribution directories. Recent releases (48 hours) may not yet be available from the mirrors.

You are currently using https://dlcdn.apache.org/. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available.

The KEYS file links to the code signing keys used to sign the product. The PGP link downloads the OpenPGP compatible signature from our main site. The SHA512 links download the checksum from the main site.

Binaries

Source