Apache log4j 1.2.17 is signed by Christian Grobmeier 42196CA8 Alternatively, you can verify the MD5 signature on the files. A unix program called md5 or md5sum is included in many unix distributions.