Verify checksums of upstream sources.