md5 sums for source files

[madeleine_yeh]

I was recently tasked with rebuilding most/all of the gnu software on the 
system, especially as the gnu site had
been found to have been hacked.   Is there any place I can go to get md5 
sums for the *.tar.gz  source files?
I would like some check to ensure that the source I am using has not been 
hacked.
      Thanks;
            Madeleine Yeh