All those links are HTTPS so you are getting a signed download. Or are you alleging that someone is MITMing your connection to the originating server?