The 3.0.0-milestone2 release is a preview of the latest stuff we've been working on to allow users to test the changes and help us resolve any problems. For a complete list of new features, API changes, etc... please see the migration guide.


The 2.7.11 release is our latest release. For a complete list if new features, API changes, etc... please see the release notes and the migration guide.


The 2.6.14 release is our latest patch release for 2.6.x release. For more information please see the release notes and the migration guide.


There will be one more release from the 2.6.x fixes branch. Users are strongly encouraged to start migrating to newer versions of CXF.



Verifying Releases

When downloading from a mirror please check the MD5 and SHA1 checksums as well as verifying the OpenPGP compatible signature available from the main Apache site. The KEYS file contains the public keys used for signing release. It is recommended that a web of trust is used to confirm the identity of these keys.

You can check the OpenPGP signature with:

You can check the MD5 checksum with:

You can check the SHA1 checksum with:

Previous releases

Previous releases are all archived in the apache archive:
Non-incubator releases:
Incubator releases:


Warning about snapshots


These are snapshot builds - untested builds provided for your convenience. They have not been tested, and are not official releases of the Apache CXF project or the Apache Software Foundation.

Snapshot distributions can be found at: (the latest one is at the bottom)



The snapshot Maven repository is

Maven 2 Repositories

If you use Maven 2 for building your applications, Apache CXF artifacts are available from the following repository URLS:


All supported CXF releases are synced into the maven central repository:


Snapshots are available in Apache's snapshot repository:


Snapshot builds are relatively untested and unsupported and are provided for verification and testing purposes.