Yes, a little searching "md5 checksum" gave many different ways to verify a checksum.
Given how often OTA downloads are broken off because of checksum error, I will now always verify anything I download from sourceforge or androidfilehost.
The md5 hashes are available on both sites, all you need is an app. There are a number available in Playstore, I chose Hashr. Dyodd.