Official downloads are signed with the manufacturer's certificate. You can verify the SHA-256 hash

Once on the official support page: