doh, that's supposed to be http.debian.net, NOT http.debian.org *facepalm*