OBTH F-Droid Repository Security

All Repositories and APKs are signed.

New releases since 2025-12-05 are signed with the certificates listed here. Older APKs may be signed by legacy certificates.

Certificates used are signed by the "Android Primary RSA 1" intermediary CA (Certificate Authority).
The "Android Primary RSA 1" is signed by "Primary ED25519", which is an self-signed root.

Current certificates used for authority

• Primary ED25519 - Certificate - Expires 2075-12-05
• Android Primary RSA 1 - Certificate - Expires 2035-12-05
• Android Primary RSA 1 - Certificate Chain
• Android Primary RSA 1 - Revocation List 1 - Published 2025-12-09 - 0 Revocations

Current certificates used to sign APKs

• Android Dev 1 (Thomas Obernosterer), Expires 2026-12-05

  SHA-1   Fingerprint: 8E:E1:27:3C:F5:FD:B7:35:26:7C:25:2C:D3:EE:CA:E7:5B:E2:0B:00
  SHA-256 Fingerprint: 82:75:58:45:0F:0B:3E:45:2C:CE:FB:B7:10:7D:02:79:C4:C1:B9:BD:69:F7:E2:39:51:26:D8:A1:19:36:04:99
  

• Android Prod 1 (Thomas Obernosterer), Expires 2026-12-05

  SHA-1   Fingerprint: D2:6B:E4:92:A4:31:30:69:7D:55:0C:98:27:F9:11:8C:93:DB:01:0B
  SHA-256 Fingerprint: B9:B6:42:A4:06:91:47:9F:99:2B:7B:69:B7:2F:71:30:76:AD:F6:DC:AC:E3:F6:06:40:68:8E:F3:A6:0C:02:13
  

Current certificates used to sign Repoistories

• Android Dist 1 (Thomas Obernosterer), Expires 2027-12-05

  SHA-1   Fingerprint: 1F:17:52:BB:E4:E2:D5:9A:A3:76:A7:17:78:88:A9:5A:BF:FE:11:E4
  SHA-256 Fingerprint: 2F:C8:DD:AB:36:12:06:E2:10:76:26:21:65:F2:A3:B3:1C:A0:A2:44:0D:C2:2C:8B:5E:15:A4:47:9D:D4:39:E3
  

• Android Dist 2 (Thomas Obernosterer), Expires 2028-01-13

  SHA-1   Fingerprint: 5A:17:31:61:5F:C6:B3:51:02:9D:B6:6A:6C:5B:8B:32:40:5C:7A:0D
  SHA-256 Fingerprint: DB:3B:26:12:94:6F:7A:40:32:4B:8F:5B:97:8B:74:1C:89:94:8A:73:08:55:DE:8E:56:C3:AE:4F:76:82:1C:EE
          

LEGACY certificates used to sign APKs

These certificates can still be trusted, but they will no longer be used for new APK signatures.

• Android Debug, Expires 2053-02-26

  SHA-1   Fingerprint: AE:7F:80:EF:EE:90:7C:A1:29:18:DF:AB:10:BD:8B:12:79:D0:95:9F
  SHA-256 Fingerprint: 31:92:CB:16:5F:DD:17:3B:16:93:04:3B:E0:0F:4A:3B:48:27:55:90:56:DC:3F:8D:CB:1E:D7:BB:6D:21:CA:56
  

• Thomas Obernosterer, Expires 2027-10-13

  SHA-1   Fingerprint: 15:E5:0C:F1:A4:63:80:92:29:21:C4:F6:58:6E:00:18:DC:2E:A2:40
  SHA-256 Fingerprint: 90:52:E1:05:27:0F:EB:00:AD:7E:C8:71:BF:BB:CF:E3:9C:EB:5B:5F:B6:E8:E1:D9:B3:D0:F4:FA:86:BC:B9:DD