we still need the MD5 sums