Apache Ant is a Java library and command-line tool that help building software.
Use the links below to download a source distribution of Ant from one of our mirrors. It is good practice to verify the integrity of the distribution files, especially if you are using one of our mirror sites. In order to do this you must use the signatures from our main distribution directory.
Ant is distributed as
tar.bz2 archives - the contents are the same. Please
note that the
tar.* archives contain file names longer
than 100 characters and have been created using GNU tar extensions.
Thus they must be untarred with a GNU compatible version of
You are currently using http://apache.mirrors.pair.com/. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available.
Currently, Apache Ant 1.9.6 is the best available version, see the release notes.
.ziparchive: apache-ant-1.9.6-src.zip [PGP] [SHA1] [SHA512] [MD5]
.tar.gzarchive: apache-ant-1.9.6-src.tar.gz [PGP] [SHA1] [SHA512] [MD5]
.tar.bz2archive: apache-ant-1.9.6-src.tar.bz2 [PGP] [SHA1] [SHA512] [MD5]
It is essential that you verify the integrity of the downloaded files using the PGP signature or the SHA1, SHA512 or MD5 checksums. The checksums are not as strong indicators as the PGP signature.
The PGP signatures can be verified using PGP or GPG. First
download the KEYS
as well as the
asc signature file for the particular
distribution. Make sure you get these files from the main distribution
directory, rather than from a mirror. Then verify the signatures
% pgpk -a KEYS
% pgpv apache-ant-1.9.6-src.tar.gz.asc
% pgp -ka KEYS
% pgp apache-ant-1.9.6-src.tar.gz.asc
% gpg --import KEYS
% gpg --verify apache-ant-1.9.6-src.tar.gz.asc
Alternatively, you can verify the checksums on the files. Unix
sha512sum are included in many unix
*sum is also available as part of GNU
Textutils. Windows users can get binary md5 programs from here, here. fsum supports MD5 and
We highly recommend to verify the PGP signature, though.