Just to throw my 2 cents in...

Thought it is not very likely someone could alter a file and fake an md5 checksum, it is very possible they could also supply you with a fake md5sum. If...