The official site provides cryptographic hash sums (like SHA-256) for each release. You can use hashing tools to verify that your downloaded file matches the exact digital fingerprint of the original release.