I don't always verify the PGP signature and check the sha256 hash on downloads, but when I do, I make certain to download some of the files, wait 4 days, download the rest after there has been an update, and then get pissed and blame the computer for things not matching up.