Pkgutil -check-signature R-4.1.1.pkg Latest release: R-4.1.1.pkg (notarized and signed) On Mac OS X 10.7 and later you can also validate the signature using In the Terminal application to print the SHA1 checksum for the R-4.1.1.pkg image. Please check the SHA1 checksum of the downloaded image to ensure that it has not been tampered with or corrupted during the mirroring process. Package binaries for R versions older than 3.2.0 are only available from the CRAN archive so users of such versions should adjust the CRAN mirror setting ( ) accordingly. Note: Although we take precautions when assembling binaries, please use the normal precautions with downloaded executables. Releases for old Mac OS X systems (through Mac OS X 10.5) and PowerPC Macs can be found in the old directory. This directory contains binaries for a base distribution and packages to run on macOS.