Some CTAN mirrors are returning a tarball with a different checksum. Work around that by mirroring it locally.