RetroArch

Name: RetroArch
Author: Libretro

by Libretro · GPL-3.0-only

RetroArch is a frontend for emulators, game engines and media players.

Record

These URLs are the ones Libretro declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

nullsoftmachine scopebuildbot.libretro.com · publisher-owned

nullsoftmachine scopebuildbot.libretro.com · publisher-owned

Run this against the file on disk. If the output does not match the hash below, the file is not what Libretro published. Delete it.

Windows · PowerShell

Get-FileHash "RetroArch-Win64-setup.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "RetroArch-Win64-setup.exe"

Expected output

bb2b95329542d98d951bb381c0dd57e803d846242878895f12d374b87201c1c9

Version on Homebrew: 1.22.2
Download URL: https://buildbot.libretro.com/stable/1.22.2/apple/osx/x86_64/RetroArch.dmg
Install with Homebrew: brew install --cask retroarch

Signal	Finding	Points
SHA-256 hash published	2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	2 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Licence declared	GPL-3.0-onlyA declared licence tells you what you are actually allowed to do with the software.	5 / 5

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/l/Libretro/RetroArch/1.22.2
macOS cask: formulae.brew.sh/cask/retroarch