123 captures
03 May 2008 - 03 Jan 2026
Mar APR May
25
2012 2013 2014
success
fail

About this capture

COLLECTED BY

Organization: Internet Archive

The Internet Archive discovers and captures web pages through many different web crawls. At any given time several distinct crawls are running, some for months, and some every day or longer. View the web archive through the Wayback Machine.

Collection: Wide Crawl started April 2013

Web wide crawl with initial seedlist and crawler configuration from April 2013.
TIMESTAMPS

The Wayback Machine - http://web.archive.org/web/20130425193550/https://fedoraproject.org/keys
  





 

Freedom. Friends. Features. First.

 
 
A Red Hat-Sponsored Community Project    






●Home
●Features & Screenshots
●Download
●Community
●Using Fedora
●Help
●Contributors
  






GPG keys


GPG keys used to sign packages
  







← Back to the main "Get Fedora" page.

GPG keys used by Fedora Project

How does Fedora Project use GPG keys to sign packages?


Each stable RPM package that is published by Fedora Project is signed with a GPG signature. By default, yum and the graphical update tools will verify these signatures and refuse to install any packages that are not signed or have bad signatures. You should always verify the signature of a package before you install it. These signatures ensure that the packages you install are what was produced by the Fedora Project and have not been altered (accidentally or maliciously) by any mirror or website that is providing the packages.
Packages that can be downloaded from koji build system do not contain signatures, so you should use them with caution. Similarly, bleeding-edge packages in Rawhide are not necessarily signed.

Importing keys


The keys are included in the fedora-release package, you can find them in the /etc/pki/rpm-gpg directory. Please note that not all keys in this directory are used by Fedora project -- some are used for signing Red Hat Enterprise Linux packages or are no longer used at all. If you use Red Hat Enterprise Linux packages, see https://www.redhat.com/security/team/key. The keys used by Fedora are enabled in the yum repository configuration, so you generally don't need to manually import them into the rpm database.
In addition to the fedora-release package and this web page, you can download the Fedora keys from a public key server, such as keys.gnupg.net.
For some repositories, such as repositories with stable and testing packages in default configuration, yum is able to find a proper key for the repository and asks the user for confirmation before importing the key if the key is not already imported into the rpm database.
You can always import a key into RPM's database by hand using the following command:  
rpm --import PUBKEY ...
Refer to rpm manual for more information.
If you want to verify that the keys installed on your system match the keys listed here, you can use GnuPG to check that the fingerprint of the key matches. For example:  
$ gpg --quiet --with-fingerprint /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-11-primary
...
pub  4096R/D22E77F2 2009-01-19 Fedora (11) <fedora@fedoraproject.org>
      Key fingerprint = AEE4 0C04 E345 60A7 1F04  3D7C 1DC5 C758 D22E 77F2

Verifying a package


When using default configuration of yum package updating and installation tool in stable releases, signature of each package is verified before it is installed. Signature verification can be turned off and on globally or for specific repository with gpgcheck directive. Do not override the default setting of this directive unless you have a very good reason to do so.
If you do not use yum, you can check the signature of the package using the following command  
rpm {-K|--checksig} PACKAGE_FILE ...

Currently used keys

RPM-GPG-KEY-fedora-19-primary 


pub   4096R/FB4B18E6 2012-12-01
      Key fingerprint = CA81 B2C8 5E4F 4D4A 1A3F  7234 0747 7E65 FB4B 18E6
uid                  Fedora (19) <fedora@fedoraproject.org>


●Download: Fedora Project
●Download: keys.gnupg.net
  

RPM-GPG-KEY-fedora-19-secondary 


pub   4096R/BA094068 2012-12-20
      Key fingerprint = E6B0 488A 1773 8126 A310  7577 0562 EB6F BA09 4068
uid                  Fedora Secondary (19) <fedora@fedoraproject.org>


●Download: Fedora Project
●Download: keys.gnupg.net
  

RPM-GPG-KEY-fedora-18-primary 


pub   4096R/DE7F38BD 2012-08-06
      Key fingerprint = 7EFB 8811 DD11 E380 B679  FCED FF01 125C DE7F 38BD
uid                  Fedora (18) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-18-secondary 


pub   4096R/A4D647E9 2012-08-06
      Key fingerprint = 62D6 986A 2639 CF2E 3790  EE45 68DC D160 A4D6 47E9
uid                  Fedora Secondary Arch (18) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-EPEL-6 


pub   4096R/0608B895 2010-04-23
      Key fingerprint = 8C3B E96A F230 9184 DA5C  0DAE 3B49 DF2A 0608 B895
uid                  EPEL (6) <epel@fedoraproject.org>

Get it from the Fedora Project  

RPM-GPG-KEY-EPEL 


pub   1024D/217521F6 2007-03-02 [expires: 2017-02-27]
      Key fingerprint = B940 BE07 7D71 0A28 7D7F  2DD1 119C C036 2175 21F6
uid                  Fedora EPEL <epel@fedoraproject.org>
sub   2048g/B6610DAF 2007-03-02 [expires: 2017-02-27]

Get it from the Fedora Project  

Obsolete keys

RPM-GPG-KEY-fedora 


pub   1024D/4F2A6FD2 2003-10-27
      Key fingerprint = CAB4 4B99 6F27 744E 8612  7CDF B442 69D0 4F2A 6FD2
uid                  Fedora Project <fedora@redhat.com>
sub   1024g/FB939E34 2003-10-27


●Fedora Core (version 6 and earlier)
●Fedora (version 7, 8, and 9)
●Both GA and updates
  

Packages on installation media are signed with this key. The relevant yum repositories are fedora, fedora-updates for Fedora 7-9, and core and core-updates for Fedora Core (Version 6 and earlier). See http://www.redhat.com/archives/fedora-announce-list/2008-August/msg00012.html for information on why this key is obsolete.
Path: /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora  

RPM-GPG-KEY-fedora-test 


pub   1024D/30C9ECF8 2003-10-27
      Key fingerprint = 3166 C14A AE72 30D9 3B7A  B2F6 DA84 CBD4 30C9 ECF8
uid                  Fedora Project (Test Software) <rawhide@redhat.com>


●Fedora (version 7 and newer) testing updates
  

If you participate in testing of the packages, this is the key you will use to verify the testing packages. This key signs the packages that are in fedora-testing repository. See http://www.redhat.com/archives/fedora-announce-list/2008-August/msg00012.html for information on why this key is obsolete.
Path: /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-test  

RPM-GPG-KEY-fedora-8-and-9-primary 


pub   1024D/6DF2196F 2008-08-27
      Key fingerprint = 4FFF 1F04 010D EDCA E203  591D 62AE C3DC 6DF2 196F
uid                  Fedora (8 and 9) <fedora@fedoraproject.org>
sub   4096g/9E198F60 2008-08-27
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-test-8-and-9-primary 


pub   1024D/DF9B0AE9 2008-08-27
      Key fingerprint = C0E7 128E 9072 96CA AE31  78A2 8E69 3B4D DF9B 0AE9
uid                  Fedora (8 and 9 testing) <fedora@fedoraproject.org>
sub   4096g/80E34F98 2008-08-27
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-10-primary 


pub   1024D/4EBFC273 2008-08-27
      Key fingerprint = 61A8 ABE0 91FF 9FBB F4B0  7709 BF22 6FCC 4EBF C273
uid                  Fedora (10) <fedora@fedoraproject.org>
sub   4096g/C1527A5F 2008-08-27
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-test-10-primary 


pub   1024D/0B86274E 2008-08-27
      Key fingerprint = C561 3076 7487 7FDF A36D  CA38 92A1 023D 0B86 274E
uid                  Fedora (10 testing) <fedora@fedoraproject.org>
sub   4096g/7645A8D9 2008-08-27
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-11-primary 


pub   4096R/D22E77F2 2009-01-19
      Key fingerprint = AEE4 0C04 E345 60A7 1F04  3D7C 1DC5 C758 D22E 77F2
uid                  Fedora (11) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-12-primary 


pub   4096R/57BBCCBA 2009-07-29
      Key fingerprint = 6BF1 78D2 8A78 9C74 AC0D  C63B 9D1C C348 57BB CCBA
uid                  Fedora (12) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-13-primary 


pub   4096R/E8E40FDE 2010-01-19
      Key fingerprint = 8E5F 73FF 2A18 1765 4D35  8FCA 7EDC 6AD6 E8E4 0FDE
uid                  Fedora (13) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-14-primary 


pub   4096R/97A1071F 2010-07-23
      Key fingerprint = 235C 2936 B4B7 0E61 B373  A020 421C ADDB 97A1 071F
uid                  Fedora (14) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-14-s390x 


pub   1024D/FDB36B03 2010-12-23
      Key fingerprint = CAF6 47A6 9736 3AB6 D91F  68DF 3E72 9CA7 FDB3 6B03
uid                  Fedora (14-s390x) <fedora@fedoraproject.org>
sub   2048g/E363096B 2010-12-23
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-15-primary 


pub   4096R/069C8460 2011-02-07
      Key fingerprint = 25DB B54B DED7 0987 F4C1  0042 B4EB F579 069C 8460
uid                  Fedora (15) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-16-primary 


pub   4096R/A82BA4B7 2011-07-25
      Key fingerprint = 05A9 12AC 7045 7C3D BC82  D352 067F 00B6 A82B A4B7
uid                  Fedora (16) <fedora@fedoraproject.org>

Get it from the Fedora Project  

RPM-GPG-KEY-fedora-16-secondary 


pub   4096R/10D90A9E 2011-08-03
      Key fingerprint = 7EF8 DA0A F3C7 D285 C298  8375 77D3 A304 10D9 0A9E
uid                  Fedora Secondary (16) <fedora@fedoraproject.org>
sub   4096g/8F77BDC3 2011-08-03

Get it from the Fedora Project  

RPM-GPG-KEY-fedora-17-primary 


pub   4096R/1ACA3465 2012-01-10
      Key fingerprint = CAC4 3FB7 74A4 A673 D81C  5DE7 50E9 4C99 1ACA 3465
uid                  Fedora (17) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-17-secondary 


pub   4096R/F8DF67E6 2012-01-10
      Key fingerprint = 2086 1F88 B77B EEC8 5CBC  1069 ED85 FCE3 F8DF 67E6
uid                  Fedora Secondary Arch (17) <fedora@fedoraproject.org>
Get it from the Fedora Project  

RPM-GPG-KEY-fedora-extras 


pub   1024D/1AC70CE6 2004-12-14
      Key fingerprint = 5389 DD00 C5BC 5168 12B4  3272 82ED 9504 1AC7 0CE6
uid                  Fedora Project <fedora-extras@fedoraproject.org>
uid                  Fedora Pre Extras Release <pre-extras@fedoraproject.org>
uid                  Fedora Project <fedora-extras@redhat.com>
sub   1024g/4E1A9D43 2004-12-14
If you are using Fedora Extras with Fedora Core 6, use this package from extras repository. This key will no longer be used after Fedora Core 6 and Extras reach EOL (December 7th 2007). This key is not included in the fedora-release package in Fedora 7 and later releases.
Path: /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora  

RPM-GPG-KEY-legacy 


pub   1024D/731002FA 2004-01-19
      Key fingerprint = D66D 121F 9784 5E7B 2757  8C46 108C 4512 7310 02FA
uid                  Fedora Legacy (http://www.fedoralegacy.org) <secnotice@fedoralegacy.org>
sub   2048g/D12E351D 2004-01-19


●Fedora Legacy
  

This key was used for packages that were released by Fedora Legacy project to update releases that reached their official EOL. The Fedora Legacy project no longer exists, so no this key will no longer be used to sign packages. This key is not included in the fedora-release package in Fedora 7 and later releases.
← Back to the main "Get Fedora" page.
  






Fedora
About Fedora
Planet Fedora
Fedora Weekly News
Documentation
Fedora Wiki
Events
  



Download
Get Fedora
Full Download List
  



Support
Get Help
IRC Help
Mailing List Help
Forums
Documentation
  



Join
Join Fedora
Fedora SIGs
Fedora Account System
Fedora Community
  



Subprojects
Documentation
Translation
Marketing
Ambassadors
Design
Infrastructure
  



 
Websites
Internationalization
News
Distribution
  



Fedora is sponsored by Red Hat.
Learn more about the relationship between Red Hat and Fedora >
© 2012 Red Hat, Inc. and others.

●Contact
●Sponsors
●Legal
●Trademark Guidelines
  
The Fedora Project is maintained and driven by the community. This is a community maintained site. Red Hat is not responsible for content.