I was not able to verify hash of primary file download,
instead of this
MD5 hash: f075570426bdb8b5980ae3bc2e38ecfc
I getting this:
MD5 40E361A47D98DBA39E07343017665267

The first mirror file is matching OK.

It's fixed now. Thanks for reporting.

-------------------------------------