Composer Public Keys / Checksums

Installer Checksum (SHA-384)

ed0feb545ba87161262f2d45a633e34f591ebb3381f2e0063c345ebea4d228dd0043083717770234ec00c5a9f9593792

Last Updated: 2025-09-18, also available as https://composer.github.io/installer.sig (checksum only) or https://composer.github.io/installer.sha384sum (sha384sum compatible) for scripting purposes.

Dev / Snapshot Public Key

Last Updated: 2016-01-11
Fingerprint: 4AC45767 E5EC2265 2F0C1167 CBBB8A2B 0C708369 153E328C AD90147D AFE50952
Also available as https://composer.github.io/snapshots.pub

Tags Public Key

Last Updated: 2016-01-11
Fingerprint: 57815BA2 7E54DC31 7ECC7CC5 573090D0 87719BA6 8F3BB723 4E5D42D0 84A14642
Also available as https://composer.github.io/releases.pub