Checksums are next to the tar.gz files

The trouble is that the checksums and source files tend to be on the same server -- so if you
can 'fix' one, you can fix the other.

However, as Jon says: most people don't bother to check check sums, if they were held on
another machine then even fewer would bother. Whatever is done has to be easy to use.