Download

Download official Apache ResilientDB (Incubating) source releases. Release artifacts are served via the Apache mirror system (closer.lua). Signature and hash files are always downloaded from the main Apache distribution site.

ResilientDB

v1.12.0 (Current)

Official ASF source release — use closer.lua mirrors for the tarball; verify with ASC or SHA512 from downloads.apache.org

Other Mirror Options

Signatures and checksums (from the main Apache distribution site):

SHA512 ASC KEYS

ASF release

Verify Your Download

It is essential that you verify the integrity of the downloaded file using the PGP signature (.asc) or, failing that, the SHA-512 hash (.sha512). Always fetch signatures, hashes, and the KEYS file from the main Apache distribution site, not from a mirror. See also Verifying Apache Software Foundation Releases.

1. Download and import the KEYS file

Download the KEYS file containing the public keys used to sign releases, then import it:

gpg --import KEYS

2. Verify using the PGP signature (preferred)

Download the .asc signature from downloads.apache.org (linked above) and verify:

gpg --verify apache-resilientdb-1.12.0-incubating-rc3-src.tar.gz.asc apache-resilientdb-1.12.0-incubating-rc3-src.tar.gz

3. Verify using the SHA-512 hash (if signature verification is unavailable)

Download the .sha512 file from downloads.apache.org and check the hash:

shasum -a 512 -c apache-resilientdb-1.12.0-incubating-rc3-src.tar.gz.sha512

On Linux, you can use sha512sum -c instead of shasum -a 512 -c.

For development from source control (unreleased code), see the Community pages. Do not use GitHub archives as a substitute for official ASF releases.