how to verify a file

date (UTC)	Mon Nov 23 04:06:46 2009

result

result
your md5	81e45be8632a29d8b83cad6adcb323ba
result	found 1 file on www.apache.org
file	tcl/rivet/source/rivet_0.4.0-1.tar.gz
signature	dist/tcl/rivet/source/rivet_0.4.0-1.tar.gz.asc
signer	David N. Welton <davidw@dedasys.com>
key ID	DFEAC4B9 - on keyservers? - paths in web-of-trust?
.md file	not found
history	md5 unchanged

verify by md5 checksum

• if you download a file from a mirror of www.apache.org,
• and you want to verify that you have an exact copy of the original,
• then you must compute the md5 checksum of the file,
• and paste the checksum in the box below; then click submit,

• the result page will tell you which file on www.apache.org matches the md5 checksum
• this file should be the file you got from the mirror.

links

• for examples, try
  81e45be8632a29d8b83cad6adcb323ba   signed package
  af3c3acf618de6108d65fcdc92b492e1   unsigned package
  941b73f73e5291a5e2b433808f5bb990   md5 changed
  d41d8cd98f00b204e9800998ecf8427e   empty files
  eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee   md5 error values
  12312312312312312312312312312312   no files
  123123123123123123123123123123zz   bad characters
  
  
• see also : known bad md5 and signature checks
• see also : signature checks by user and project
• some background
  • what is a checksum?
  • how to compute a checksum
  • how the verifier works