Drop in a download and check it against the checksum the publisher printed. SHA-256, SHA-1, MD5, SHA-512 and CRC32, or all of them in a single pass over the file.
A file of any size works: it is read in pieces and the pieces are discarded as they are hashed, so nothing has to fit in memory and nothing is ever uploaded. Save the result as a checksum file when you need one.