Downloads
Use the links below to download Apache Jackrabbit releases from one of our mirrors. You should verify the integrity of the files using the signatures and checksums available from this page.
- Latest stable release: Apache Jackrabbit 2.6.1
- Latest unstable release: Apache Jackrabbit 2.7.0
- Jackrabbit Oak experimental release: Apache Jackrabbit Oak 0.7
- Maintenance releases: Apache Jackrabbit 2.4.4, Apache Jackrabbit 2.2.13
- Latest stable OCM release: Apache Jackrabbit OCM 2.0.0
- Release Archive
Apache Jackrabbit releases are available under the Apache License, Version 2.0. See the NOTICE.txt file contained in each release artifact for applicable copyright attribution notices. Some Jackrabbit components contain external code with licenses that meet Apache licensing policies. See the LICENSE.txt file contained in each release artifact for applicable licenses.
Apache Jackrabbit 2.6.1 (12-May-2013)
Apache Jackrabbit 2.6.1 is patch release that contains fixes and improvements over previous 2.6.x releases. Jackrabbit 2.6.x releases are considered stable and targeted for production use.
See the full release notes for more details.
- jackrabbit-2.6.1-src.zip (12M, source zip, PGP signature)
SHA1 checksum:f17b2a8c62631087472d3ea098ef38291203a920
MD5 checksum:15ab9a2357c70f8a3eac1477cf2fb079 - jackrabbit-standalone-2.6.1.jar (64M, standalone server, PGP signature)
SHA1 checksum:4732bad83d84b4ada5b1faaf1b944b9f1548a973
MD5 checksum:70e120cd7532c4c26cc8bca80cecc3db - jackrabbit-webapp-2.6.1.war (27M, web application, PGP signature)
SHA1 checksum:631a34f0d6fbbcf46dbf5d3b549e0ddedad85e3b
MD5 checksum:45b55e1f95841900d27c84e3078794d3 - jackrabbit-jca-2.6.1.rar (25M, JCA resource adapter, PGP signature)
SHA1 checksum:1e4c48aa0c3d4e71d7a34048f6620958b51cfd11
MD5 checksum:ad634b98b830826dbd68ffba13180e02
Apache Jackrabbit 2.7
Apache Jackrabbit 2.7.x is an unstable series of releases cut directly from Jackrabbit trunk, with a focus on new features and other improvements. For production use we recommend the latest stable releases.
See the full release notes for more details.
- jackrabbit-2.7.0-src.zip (12M, source zip, PGP signature)
SHA1 checksum:831007469ea8a4324a981daf9ac43390b62e25c3
MD5 checksum:527bf0c56070fabf8110ce139ad79f43 - jackrabbit-standalone-2.7.0.jar (64M, standalone server, PGP signature)
SHA1 checksum:3a2d1f97ad04f23ab9a610f1958c151629c3d7ed
MD5 checksum:0d0f89e0550b7edb8c13539e2a70f0f1 - jackrabbit-webapp-2.7.0.war (27M, web application, PGP signature)
SHA1 checksum:c7095b3046ce05b47a1a7b88e720355b71b9a317
MD5 checksum:258c2cc8204541f55de54c2f12709ee7 - jackrabbit-jca-2.7.0.rar (25M, JCA resource adapter, PGP signature)
SHA1 checksum:aa278836c05ffc7fb69a567e5d8abf65370800e9
MD5 checksum:5cb4a4f88ec04bfb50d2076faf833557
Apache Jackrabbit 2.4.4 (13-May-2013)
Apache Jackrabbit 2.4.4 is patch release that contains fixes and improvements over previous 2.4.x releases. Jackrabbit 2.4.x releases are considered stable and targeted for production use.
See the full release notes for more details.
- jackrabbit-2.4.4-src.zip (12M, source zip, PGP signature)
SHA1 checksum:608ae0c4b61362e72cf95f41bd4bf9732a74a7c1
MD5 checksum:212f264669ef7bd04e37441b8aa25109 - jackrabbit-standalone-2.4.4.jar (59M, standalone server, PGP signature)
SHA1 checksum:8519cbc39330ca66aa5043c858c3672e44a2371a
MD5 checksum:f8611914835efb93ca65021bf35c19b6 - jackrabbit-webapp-2.4.4.war (24M, web application, PGP signature)
SHA1 checksum:8738d76993b01a964a00b590e9405b8fff8c0ce8
MD5 checksum:f5c8702ec9635e1c133f645abfcaa350 - jackrabbit-jca-2.4.4.rar (23M, JCA resource adapter, PGP signature)
SHA1 checksum:aa6589913ad9102d2c7bafa8790a14bb12f927a1
MD5 checksum:a1490f05e1c856d7cf9a892a1059a0d5
Apache Jackrabbit 2.2.13 (04-October-2012)
Apache Jackrabbit 2.2.13 is patch release that contains fixes and improvements over previous 2.2.x releases. This release is fully compatible with earlier 2.x.x releases.
See the full release notes for more details.
- jackrabbit-2.2.13-src.zip (11M, source zip, PGP signature)
SHA1 checksum: 10841ef0544c821f73131e0970d0ea4806b63236
MD5 checksum: 86eab6af0f75328422ae98602218b96b
- jackrabbit-standalone-2.2.13.jar (33M, standalone server, PGP signature)
SHA1 checksum: 2d65b9d99dad367a56d6e41504681c801687a19b
MD5 checksum: 85b9a2a3e076d89822710e3edf38ee7c
- jackrabbit-webapp-2.2.13.war (27M, web application, PGP signature)
SHA1 checksum: 04e9461df62c47e491b3a7c03a092e14b25023a9
MD5 checksum: f8c08cc54c4f28418276d1521840ca3b
- jackrabbit-jca-2.2.13.rar (26M, JCA resource adapter, PGP signature)
SHA1 checksum: 3e292ea32a462318b7e49723d4aa4d6ac053856d
MD5 checksum: ccd86435f6c09fc33ffd6667ee3d9a90
Apache Jackrabbit Oak 0.7 (May 20, 2013)
Jackrabbit Oak 0.7 is to be considered alpha-level software. Use at your own risk with no stability or compatibility guarantees.
See the full release notes for more details.
- jackrabbit-oak-0.7-src.zip (2.2M, source zip, PGP signature)
SHA1 checksum:b195f9d41dc47b46a95eaa2e5e30c7048af91aa7
MD5 checksum:d33a4087615dc1cd543b2cb65d141fb4
Apache Jackrabbit OCM 2.0.0 (10-July-2012)
Apache Jackrabbit OCM 2.0.0 is release that contains fixes and improvements over Jackrabbit OCM 1.5. Apart from the test classes, it does not depend on Apache Jackrabbit core, but only on the JCR 2.0 specification
See the full release notes for more details.
- jackrabbit-ocm-2.0.0-source-release.zip (518K, source zip, PGP signature)
SHA1 checksum: 8e57c6b956ae271fa4df8cbe8d3e21a128ebc66e
MD5 checksum: 7495daad93eaa2aa2a3b02960b791cf3
Release Archive
Only current recommended releases are available on the main distribution site and its mirrors. Older releases are available from the archive download site.
Verify
It is essential that you verify the integrity of the downloaded files using the PGP signatures or MD5 and SHA1 checksums. Please read Verifying Apache HTTP Server Releases for more information on why you should verify our releases.
The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well as the .asc signature files for the relevant release packages. Make sure you get these files from the main distribution directory, rather than from a mirror. Then verify the signatures using
% pgpk -a KEYS % pgpv jackrabbit-X.Y.Z-src.zip.asc
or
% pgp -ka KEYS % pgp jackrabbit-X.Y.Z-src.zip.asc
or
% gpg --import KEYS
% gpg --verify jackrabbit-X.Y.Z-src.zip.asc
Alternatively, you can verify the MD5 or SHA1 checksums on the files. For checking the MD5 checksums, use the program called md5 or md5sum included in many Unix distributions. The similar program for SHA1 is called sha1sum. It is also available as part of the GNU core utilities. Windows users can get binary md5 programs from here, here, or here.

