Use this checksums to verify your download. The Checksum is always SHA256, HowToSHA256SUm via Ubuntu.com.
Updated for RPi3+
2fc877040d4a46a0a5b229942c415a831ad16d7fea9ad6917448f76285280282
81635482b91c7464d24754615ea2e8c44be84f454dc0e8feaf1a4fa05753ca3c
e8021112096c967553be31a1d0059b9e0902a3ab8f9cb1658a0dc71ec4fdf8ec
a3583d99383dc58239338a7d33a070d85a3cfda9826a530ff3cfea16bba5588d
5a5baebd713758671219409e1e4b6af6cb03ea7cc78bc7c865ba5c4225fb77c1