FWIW, files.kde.org does support HTTPS as well.

boudewijnrempt · on July 14, 2016

And if you press the details link you get all the info you could want:

    Filename: Krita-3.0-Alpha-master-e5109c2-x86_64.AppImage
    Size: 85M (88670208 bytes)
    Last modified: Mon, 11 Apr 2016 07:27:01 GMT (Unix time: 1460359621)
    SHA-256 Hash: 5d6574f750a188f67548d965ce6a8abd4d33479bc64f88130e545250e179a0e1
    SHA-1 Hash: bf969c7ce56aac754eb84a2123caa9cbf4174884
    MD5 Hash: ee0b82e82a98086dccad7f1344888a1c

blub · on July 14, 2016

The hashes only seem to be visible over http (no details link over https).