@serigala_tropis
Or check the signature of the files.

Debian signs files with sha256 and sha512 hashes of the distribution images