integrity of the downloaded files using the pgp or sha signatures. the pgp signatures can be verified using gpg or pgp. please download the keys as well as the asc signature files for relevant distribution. it is recommended to get these files from the main distribution directory and not from the mirrors...