shaunm / centos / centos.org

Forked from centos/centos.org 2 years ago
Clone

Blame keys.md

41ecaa
---
401d07
title: "CentOS GPG Keys"
41ecaa
---
41ecaa
401d07
## How CentOS uses GPG keys
Carl George 017343
Carl George 017343
Each stable RPM package that is published by CentOS Project is signed with a GPG signature.
Carl George 017343
By default, dnf will verify these signatures
Carl George 017343
and refuse to install any packages that are not signed,
Carl George 017343
or have an incorrect signature.
Carl George 017343
You should always verify the signature of a package prior to installation.
Carl George 017343
These signatures ensure that the packages you install are what was produced by the CentOS Project
Carl George 017343
and have not been altered by any mirror or website providing the packages.
41ecaa
401d07
## Importing Keys
41ecaa
Carl George 017343
The Project GPG keys are included in the centos-gpg-keys package,
Carl George 017343
and are typically found in the /etc/pki/rpm-gpg directory.
Carl George 017343
Please note that not all keys in this directory are used by the CentOS project.
Carl George 017343
Some keys may be placed in this directory by 3rd party repositories
Carl George 017343
to enable the secure use of extra packages as well.
Carl George 017343
The keys used by CentOS are enabled in the dnf repository configuration,
Carl George 017343
so you generally don't need to manually import them.
41ecaa
Carl George 017343
If you want to verify that the keys installed on your system match the keys listed here,
Carl George 017343
you can use GnuPG to check that the key fingerprint matches. For example:
41ecaa
Carl George 017343
```plain
Carl George 017343
$ gpg --show-keys /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
Carl George 017343
pub   rsa4096 2019-05-03 [SC]
Carl George 017343
      99DB70FAE1D7CE227FB6488205B555B38483C65D
Carl George 017343
uid                      CentOS (CentOS Official Signing Key) <security@centos.org>
Carl George 017343
```
41ecaa
401d07
## Project Keys
c18eb6
Carl George 017343
The following keys are currently in use by the CentOS Project.
c18eb6
Carl George 017343
### CentOS Official
b9d931
b9d931
[download key - SHA256](/keys/RPM-GPG-KEY-CentOS-Official-SHA256)
b9d931
b9d931
[download key - SHA1](/keys/RPM-GPG-KEY-CentOS-Official)
c18eb6
Carl George 017343
```plain
Carl George 017343
pub   rsa4096 2019-05-03 [SC]
Carl George 017343
      99DB70FAE1D7CE227FB6488205B555B38483C65D
Carl George 017343
uid                      CentOS (CentOS Official Signing Key) <security@centos.org>
Carl George 017343
```
Carl George 017343
Carl George 017343
### CentOS Testing
c18eb6
c18eb6
[download key](/keys/RPM-GPG-KEY-CentOS-Testing)
c18eb6
Carl George 017343
```plain
Carl George 017343
pub   rsa4096 2019-05-03 [SC]
Carl George 017343
      793D90726BF022DAE8682C36762E65855BA5FA8D
Carl George 017343
uid                      CentOS Testing (CentOS Testing content) <security@centos.org>
Carl George 017343
```
41ecaa
Carl George 017343
### Extras
41ecaa
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Extras)
c28cb8
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2021-12-16 [SCEA]
Carl George 017343
      363FC0972F64B699AED3968E1FF6A2171D997668
Carl George 017343
uid                      CentOS Extras SIG (https://wiki.centos.org/SpecialInterestGroup) <security@centos.org>
Carl George 017343
sub   rsa2048 2021-12-16 [SEA]
Carl George 017343
```
41ecaa
Carl George 017343
## SIG Keys
c28cb8
Carl George 017343
### AltImages SIG
41ecaa
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-AltImages)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2023-06-02 [SCEA]
Carl George 017343
      2C77CFEB1F99C559E52B3CDC8DEF9614B094B96D
Carl George 017343
uid                      CentOS AltImages SIG (https://wiki.centos.org/SpecialInterestGroup/AltImages) <security@centos.org>
Carl George 017343
sub   rsa2048 2023-06-02 [SEA]
Carl George 017343
```
c28cb8
Carl George 017343
### Atomic SIG
41ecaa
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Atomic)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2015-06-10 [SC]
Carl George 017343
      64E3E7558572B59A319452AAF17E745691BA8335
Carl George 017343
uid                      CentOS Atomic SIG (http://wiki.centos.org/SpecialInterestGroup/Atomic) <security@centos.org>
Carl George 017343
```
41ecaa
Carl George 017343
### Automotive SIG
c28cb8
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Automotive)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2021-07-27 [SCEA]
Carl George 017343
      D8ACED2DC7CE8029FEC77C084B411A9068E964CA
Carl George 017343
uid                      CentOS Automotive SIG (https://wiki.centos.org/SpecialInterestGroup/Automotive) <security@centos.org>
Carl George 017343
sub   rsa2048 2021-07-27 [SEA]
Carl George 017343
```
41ecaa
Carl George 017343
### Cloud SIG
c28cb8
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Cloud)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2015-05-15 [SC]
Carl George 017343
      736AF5116D9C40E2AF6B074BF9B9FEE7764429E6
Carl George 017343
uid                      CentOS Cloud SIG (http://wiki.centos.org/SpecialInterestGroup/Cloud) <security@centos.org>
Carl George 017343
```
41ecaa
Carl George 017343
### ConfigManagement SIG
c28cb8
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-ConfigManagement)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2018-03-21 [SC]
Carl George 017343
      C75AFB57D5C0F238CB15BEC81AE110FA6E8B7E8A
Carl George 017343
uid                      CentOS Config Management SIG (https://wiki.centos.org/SpecialInterestGroup/ConfigManagementSIG) <security@centos.org>
Carl George 017343
```
c28cb8
Carl George 017343
### Core SIG
41ecaa
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Core)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2021-10-06 [SCEA]
Carl George 017343
      E904CACD9EB83D8B13BAB052827F178E15BACBD2
Carl George 017343
uid                      CentOS Core SIG (https://wiki.centos.org/SpecialInterestGroup/Core) <security@centos.org>
Carl George 017343
sub   rsa2048 2021-10-06 [SEA]
Carl George 017343
```
41ecaa
Carl George 017343
### HyperScale SIG
c28cb8
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-HyperScale)
41ecaa
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2021-01-18 [SC]
Carl George 017343
      9B04530E0ED6ABC4B2C358DD2A01FA2AEB3DAC40
Carl George 017343
uid                      CentOS HyperScale SIG (https://wiki.centos.org/SpecialInterestGroup/Hyperscale) <security@centos.org>
Carl George 017343
sub   rsa2048 2021-01-18 [E]
Carl George 017343
```
41ecaa
Carl George 017343
### Infra SIG
41ecaa
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Infra)
b03e5f
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2020-08-13 [SC]
Carl George 017343
      2F3B7058BCFAC3AB0C72B1BC8B444FCEF56D1621
Carl George 017343
uid                      CentOS Infra SIG (https://wiki.centos.org/SpecialInterestGroup/Core) <security@centos.org>
Carl George 017343
sub   rsa2048 2020-08-13 [E]
Carl George 017343
```
b03e5f
Carl George 017343
### ISA SIG
b03e5f
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-ISA)
1d7a3b
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2023-05-26 [SCEA]
Carl George 017343
      D6895EFFD4B12FC38569C5A9C114980CDE702AB7
Carl George 017343
uid                      CentOS ISA SIG (https://wiki.centos.org/SpecialInterestGroup/Isa) <security@centos.org>
Carl George 017343
sub   rsa2048 2023-05-26 [SEA]
Carl George 017343
```
1d7a3b
Carl George 017343
### Kmods SIG
2c11fe
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Kmods)
9302fc
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2021-06-22 [SCEA]
Carl George 017343
      48EF712EC5DDB68B5280BE455B8E1A767AE06D54
Carl George 017343
uid                      CentOS Kmods SIG (https://wiki.centos.org/SpecialInterestGroup/Kmods) <security@centos.org>
Carl George 017343
sub   rsa2048 2021-06-22 [SEA]
Carl George 017343
```
ea540d
Carl George 017343
### Messaging SIG
b03e5f
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Messaging)
efa69e
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2019-12-01 [SC]
Carl George 017343
      A9265AE9171868B82F91555083014EBBE16E0D12
Carl George 017343
uid                      CentOS Messaging SIG (https://wiki.centos.org/SpecialInterestGroup/Messaging) <security@centos.org>
Carl George 017343
sub   rsa2048 2019-12-01 [E]
Carl George 017343
```
c8378f
Carl George 017343
### NFV SIG
ea540d
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-NFV)
ea540d
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2018-02-20 [SC]
Carl George 017343
      35154228174901BEFA8E69A621465E289D2A76A7
Carl George 017343
uid                      CentOS NFV SIG (https://wiki.centos.org/SpecialInterestGroup/NFV) <security@centos.org>
Carl George 017343
```
f6cc9c
Carl George 017343
### OpsTools SIG
484a79
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-OpsTools)
229bfd
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2017-02-20 [SC]
Carl George 017343
      787281769AD7387885EEA6494FD9532751BC2A13
Carl George 017343
uid                      CentOS OpsTools SIG (https://wiki.centos.org/SpecialInterestGroup/OpsTools) <security@centos.org>
Carl George 017343
```
229bfd
Carl George 017343
### PaaS SIG
1ec825
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-PaaS)
1ec825
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2016-05-18 [SC]
Carl George 017343
      C5E8AB446FA7893D749051F1C34C5BD42F297ECC
Carl George 017343
uid                      CentOS PaaS SIG (https://wiki.centos.org/SpecialInterestGroup/PaaS) <security@centos.org>
Carl George 017343
```
1ec825
Carl George 017343
### Software Collections SIG
1ec825
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-SCLo)
aed487
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2015-10-01 [SC]
Carl George 017343
      C4DBD535B1FBBA14F8BA64A84EB84E71F2EE9D55
Carl George 017343
uid                      CentOS SoftwareCollections SIG (https://wiki.centos.org/SpecialInterestGroup/SCLo) <security@centos.org>
Carl George 017343
```
aed487
Carl George 017343
### Storage SIG
fc51c0
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Storage)
fc51c0
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2015-01-23 [SC]
Carl George 017343
      74129C0B173B071A3775951AD4A2E50BE451E5B5
Carl George 017343
uid                      CentOS Storage SIG (http://wiki.centos.org/SpecialInterestGroup/Storage) <security@centos.org>
Carl George 017343
```
0feae3
Carl George 017343
### Virtualization SIG
0feae3
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-Virtualization)
f6cc9c
Carl George 017343
```plain
Carl George 017343
pub   rsa2048 2015-06-17 [SC]
Carl George 017343
      A7C8E761309D2F1C92C50B627AEBBE8261E8806C
Carl George 017343
uid                      CentOS Virtualization SIG (http://wiki.centos.org/SpecialInterestGroup/Virtualization) <security@centos.org>
Carl George 017343
```
b03e5f
Carl George 017343
## Obsolete Keys
5a8114
Carl George 017343
### CentOS 7
7581ba
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-7)
1ec825
Carl George 017343
```plain
Carl George 017343
pub  4096R/F4A80EB5 2014-06-23 CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>
Carl George 017343
      Key fingerprint = 6341 AB27 53D7 8A78 A7C2  7BB1 24C6 A8A7 F4A8 0EB5
Carl George 017343
```
1ec825
Carl George 017343
### CentOS 7 Debug
6063a4
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-Debug-7)
b03e5f
Carl George 017343
```plain
Carl George 017343
pub  2048R/B6792C39 2014-07-15 CentOS-7 Debug (CentOS-7 Debuginfo RPMS) <security@centos.org>
Carl George 017343
      Key fingerprint = 759D 690F 6099 2D52 6A35  8CBD D0F2 5A3C B679 2C39
Carl George 017343
```
ad0970
Carl George 017343
### CentOS 7 Testing
b03e5f
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-Testing-7)
Carl George 017343
Carl George 017343
```plain
Carl George 017343
pub  4096R/8FAE34BD 2014-06-04 CentOS-7 Testing (CentOS 7 Testing content) <security@centos.org>
Carl George 017343
      Key fingerprint = BA02 A5E6 AFF9 70F7 269D  D972 C788 93AC 8FAE 34BD
Carl George 017343
```
Carl George 017343
Carl George 017343
### CentOS 6
Carl George 017343
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-6)
Carl George 017343
Carl George 017343
```plain
Carl George 017343
pub  4096R/C105B9DE 2011-07-03 CentOS-6 Key (CentOS 6 Official Signing Key) <centos-6-key@centos.org>
Carl George 017343
      Key fingerprint = C1DA C52D 1664 E8A4 386D  BA43 0946 FCA2 C105 B9DE
Carl George 017343
```
Carl George 017343
Carl George 017343
### CentOS 6 Debug
5a8114
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-Debug-6)
Carl George 017343
Carl George 017343
```plain
Carl George 017343
pub  4096R/D0FF3D16 2011-07-03 CentOS-6 Debuginfo Key (CentOS-6 Debuginfo Signing Key) <centos-6-debug-key@centos.org>
Carl George 017343
      Key fingerprint = 69B3 0F26 BA2B 3AA4 C27C  E4F5 3B75 CF79 D0FF 3D16
Carl George 017343
```
Carl George 017343
Carl George 017343
### CentOS 6 Testing
Carl George 017343
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-Testing-6)
Carl George 017343
Carl George 017343
```plain
Carl George 017343
pub  4096R/EF1D6DB8 2011-07-03 CentOS-6 Testing Key (CentOS-6 Test and Beta Signing Key) <centos-6-testing-key@centos.org>
Carl George 017343
      Key fingerprint = 4233 9C29 8BC4 352C A4F9  7504 119C 1A87 EF1D 6DB8
Carl George 017343
```
Carl George 017343
Carl George 017343
### CentOS 6 Security
Carl George 017343
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-Security-6)
b03e5f
Carl George 017343
```plain
Carl George 017343
pub  4096R/FE837F6F 2011-07-03 CentOS-6 Security Key (CentOS-6 Official Security Key) <centos-6-security-key@centos.org>
Carl George 017343
      Key fingerprint = 0830 F43C 928A A5A8 A6F1  AF97 0B13 2C3F FE83 7F6F
Carl George 017343
```
Carl George 017343
Carl George 017343
### CentOS 5
Carl George 017343
Carl George 017343
[download key](/keys/RPM-GPG-KEY-CentOS-5)
Carl George 017343
Carl George 017343
```plain
Carl George 017343
pub  1024D/E8562897 2007-01-06 CentOS-5 Key (CentOS 5 Official Signing Key) <centos-5-key@centos.org>
Carl George 017343
      Key fingerprint = 473D 66D5 2122 71FD 51CC  17B1 A8A4 47DC E856 2897
Carl George 017343
sub  1024g/1E9EA3B6 2007-01-06 [expires: 2017-01-03]
Carl George 017343
```
b03e5f
Carl George 017343
### CentOS 5 Beta
Carl George 017343
Carl George 017343
```plain
Carl George 017343
pub  1024D/092D7B2B 2007-01-06 CentOS-5 Beta Key (CentOS 5 Beta Signing Key) <centos-5-beta-key@centos.org>
Carl George 017343
      Key fingerprint = 5D82 2DFA 48B3 BE04 586C  BD4D CFDA 6881 092D 7B2B
Carl George 017343
sub  1024g/DA743639 2007-01-06 [expires: 2017-01-03]
Carl George 017343
```
Carl George 017343
Carl George 017343
### AltArch AArch64
b03e5f
c28cb8
[download key](/keys/RPM-GPG-KEY-CentOS-7-aarch64)
c28cb8
Carl George 017343
```plain
Carl George 017343
pub  2048R/305D49D6 2015-07-28 CentOS AltArch SIG - AArch64 (http://wiki.centos.org/SpecialInterestGroup/AltArch/AArch64) <security@centos.org>
Carl George 017343
      Key fingerprint = EF8F 3CA6 6EFD F32B 36CD  ADF7 6C7C B6EF 305D 49D6
Carl George 017343
```
Carl George 017343
Carl George 017343
### AltArch Arm32
b03e5f
c28cb8
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-AltArch-Arm32)
c28cb8
Carl George 017343
```plain
Carl George 017343
pub  2048R/62505FE6 2015-11-27 CentOS AltArch SIG - Arm32 (https://wiki.centos.org/SpecialInterestGroup/AltArch/Arm32) <security@centos.org>
Carl George 017343
      Key fingerprint = 4D9E 39F1 499C A21D D289  77F8 CAFE F11B 6250 5FE6
Carl George 017343
```
Carl George 017343
Carl George 017343
### AltArch PowerPC
b03e5f
c28cb8
[download key](/keys/RPM-GPG-KEY-CentOS-SIG-AltArch-7-ppc64)
c28cb8
Carl George 017343
```plain
Carl George 017343
pub  2048R/F533F4FA 2015-11-27 CentOS AltArch SIG - PowerPC (https://wiki.centos.org/SpecialInterestGroup/AltArch) <security@centos.org>
Carl George 017343
      Key fingerprint = BAFA 3436 FC50 768E 3C3C  2E4E A963 BBDB F533 F4FA
Carl George 017343
```