The sha256sums.txt hasn't been signed yet so it has only been verified
by downloading it through HTTPS. This should be cool since this is for
testing purposes only.