Coreboot

$ gpg --verify coreboot-24.02.01.tar.xz.sig coreboot-24.02.01.tar.xz
Fingerprints of keys used to sign the binaries as of 24.02.01:

coreboot releases are currently done on a roughly quarterly release cycle.
$ gpg --verify coreboot-24.02.tar.xz.sig coreboot-24.02.tar.xz
If you get a message saying "Can't check signature: No public key", copy the key fingerprint from below and fetch it from the keyserver.
$ gpg --receive-keys "574C E6F6 855C FDEB 7D36 8E9D 1979 6C2B 3E4F 7DF7"
Fingerprints of keys used to sign the binaries as of 24.02:
C75A AA4E 5C9D B017 C1DC 6EDB DB1B 0EC2 9202 D874 - Matt DeVillier <matt.devillier@gmail.com>
1504 DB83 B939 05F5 160E B3FD 86EB 2116 4957 3F59 - Jason Glenesk (coreboot developer) <Jason.Glenesk@gmail.com>
D0BB 76A6 FB81 653A 2B17 5BC2 DB68 2C09 2C49 D476 - Patrick Georgi <atrick@georgi.software>
7642 F206 B20B 77DA EB5B 611A 53C8 8CBF BC4F 65F3 - Angel Pons <th3fanbus@gmail.com>
EB51 718A 2D22 AB1D A92C 74B1 1F99 1B62 CCC9 259B - Patrick Georgi <patrick@georgi.software>
3D70 5758 E41E B17A 3D28 7549 4105 0E81 8DCB 9057 - Patrick Georgi <pgeorgi@google.com>
390D CF78 8BF9 AA50 4F8F F1E2 C29E 9DA6 A0DF 8604 - Alexander Couzens <lynxis@fe80.eu> [expired]
574C E6F6 855C FDEB 7D36 8E9D 1979 6C2B 3E4F 7DF7 - Martin Roth (coreboot developer) <martin@coreboot.org>

$ gpg --verify coreboot-4.16.tar.xz.sig coreboot-4.16.tar.xz
Keys used to sign the binaries as of 4.16:

Downloads
Releases
For a number of years, coreboot releases have been done twice a year. Starting as of release 4.15, we are switching to a quarterly release cadence.
In general these releases are done for OEM/ODMs and other groups who want a "stable" release base. If you are a developer or end user, we recommend that you use the master branch of the coreboot repository.
Get the coreboot source from the git repository
$ git clone https://review.coreboot.org/coreboot.git
Release archives
Release
Date
Source
SourceGPG
Blobs
BlobsGPG
ReleaseNotes
Signatures
The releases are signed with a PGP/GPG signature. To verify the release, run:
$ gpg --verify coreboot-4.15.tar.xz.sig coreboot-4.15.tar.xz
If you get a message saying "Can't check signature: No public key", copy the key value and fetch it from the keyserver.
$ gpg --receive-keys 574CE6F6855CFDEB7D368E9D19796C2B3E4F7DF7
(省略されました)

coreboot releases are done twice a year. In general these releases are done for OEM/ODM's and other groups who want a "stable" release base. If you are a developer or end user, we recommend that you use the master branch of the coreboot repository.
Get the coreboot source from the git repository
git clone https://review.coreboot.org/coreboot.git
coreboot 4.12
12. May 2020
coreboot 4.11
19. November 2019
coreboot 4.10
22. July 2019
coreboot 4.9
20. December 2018
coreboot 4.8.1
16. May 2018
coreboot 4.7
14. January 2018
coreboot 4.5
18. October 2016
coreboot 4.4
01. May 2016
(省略されました)

coreboot 4.12
12. May 2020

coreboot 4.11
19. November 2019

coreboot 4.10
22. July 2019

coreboot 4.9
20. December 2018

coreboot 4.8.1
16. May 2018

coreboot 4.8
15. May 2018