Maybe the problem is not with the file, but instead the checksum itself? Today I see:
W: Failed to fetch http://ftp.tw.debian.org/debian/dists/experimental/main/binary-i386/Packages.bz2 Hash Sum mismatch # HEAD http://ftp.tw.debian.org/debian/dists/experimental/main/binary-i386/Packages.bz2 200 OK Connection: close Date: Fri, 05 Feb 2010 22:48:53 GMT Accept-Ranges: bytes Age: 37 ETag: "800155af-41212-47ee047d8b080" Server: Apache/2.2.9 (Debian) mod_ssl/2.2.9 OpenSSL/0.9.8g Content-Length: 266770 Content-Type: application/x-bzip2 Last-Modified: Fri, 05 Feb 2010 20:27:30 GMT Client-Date: Fri, 05 Feb 2010 22:48:48 GMT Client-Peer: 140.112.8.139:80 Client-Response-Num: 1 # HEAD http://ftp.us.debian.org/debian/dists/experimental/main/binary-i386/Packages.bz2 200 OK Connection: close Date: Fri, 05 Feb 2010 22:49:54 GMT Accept-Ranges: bytes ETag: "195eef-41212-47ee047d8b080" Server: Apache Content-Length: 266770 Content-Type: text/plain Last-Modified: Fri, 05 Feb 2010 20:27:30 GMT Client-Date: Fri, 05 Feb 2010 22:49:54 GMT Client-Peer: 64.50.236.52:80 Client-Response-Num: 1 W: GPG error: http://ftp.tw.debian.org unstable Release: The following signatures were invalid: BADSIG 9AA38DCD55BE302B Debian Archive Automatic Signing Key (5.0/lenny) <ftpmas...@debian.org> -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org