file.wiki

Software

aria2

by aria2 · GPL-2.0-or-later

83/100how this is calculated

The next generation download utility.

Record

Latest version
1.37.0
Release date
15 Nov 2023
Official page
https://aria2.github.io/
Package identifier
aria2.aria2

Official downloads

These URLs are the ones aria2 declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

More than one architecture below. Check which one your Windows is if you are not sure.

Verify the file you downloaded

Run this against the file on disk. If the output does not match the hash below, the file is not what aria2 published. Delete it.

Windows · PowerShell

Get-FileHash "aria2-1.37.0-win-64bit-build1.zip" -Algorithm SHA256

macOS · Linux

shasum -a 256 "aria2-1.37.0-win-64bit-build1.zip"

Expected output

67d015301eef0b612191212d564c5bb0a14b5b9c4796b76454276a4d28d9b288

Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.

How we scored this 83 out of 100

SignalFindingPoints
SHA-256 hash published2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.30 / 30
Binary provenance2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.29.8 / 35
Served over HTTPS2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.15 / 15
Release recencylast release about 34 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.3 / 15
Licence declaredGPL-2.0-or-laterA declared licence tells you what you are actually allowed to do with the software.5 / 5

Is aria2 safe to download?

The installer comes from a recognised distribution platform rather than aria2's own domain. That is normal for this kind of software and not a red flag by itself.

Every one of the 2 installers on this page comes with the SHA-256 aria2 declared, so you do not have to take our word for it: hash the file you downloaded and compare.

What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.

If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.

How the 83/100 score is calculated · why the source matters more than the reputation

Install aria2 with winget

Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.

Install

winget install --id aria2.aria2 --exact

Upgrade later

winget upgrade --id aria2.aria2

Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.

Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.

Old versions of aria21 with hashes

The version history of aria2, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.

We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.

1.36.0

released 21 Aug 2021
  • aria2-1.36.0-win-32bit-build1.zip32-bitofficial URL

    C35A1BFA06726914006888929C6CE147E50B1D9FCA8D1DC89BCD2C926F8C16DE

  • aria2-1.36.0-win-64bit-build1.zip64-bitofficial URL

    C82DF5415125B438D72443923FEA7F5F9FDA1F326D0DBFAC6AAB16D58DBB7BF0

Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.

Every version on record2

Every aria2 version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.

  • 1.37.0
  • 1.36.0

Similar programs we index

Matched on the categories aria2 and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.

More programs we index

Not related to aria2 — just other entries, each with its own official URL and published hash.

Where our data comes from

Windows manifest
github.com/microsoft/winget-pkgs/tree/master/manifests/a/aria2/aria2/1.37.0