Current releases:

Verify the integrity of the files:

It is essential that you verify the integrity of the downloaded files using the PGP, MD5 or SHA signatures. The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well as the asc signature file for the relevant distribution. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using
        % pgpk -a KEYS
        % pgpv mod_perl-2.0.13.tar.gz.asc
        or,
        % pgp -ka KEYS
        % pgp mod_perl-2.0.13.tar.gz.asc
        or,
        % gpg --import KEYS
        % gpg --verify mod_perl-2.0.13.tar.gz.asc
        
Alternatively, you can verify the MD5 or SHA signatures on the files. Ensure your generated signature string matches the signature string published in the files above.