Canonical SHA-256 checksums for every published build. This page lives at the on-chain
name releases.silentmode.bch; the name pins where it is served from, so a tampered
mirror cannot change what you check against here.
b8cc85ec0f70844e4ce14a70b0ff89b9d9720be2f0e5568e56c51ecef706b14d
6540b4c67906046cd2c5303a9ccaa4e00a39b3daa5792b71e16c4f141f498220
9ab725bec5567625e5857a49b112c4fbc0f59dbdd623abd7110429306f5d0ddb
03c95832c16cc4763acaadbf328caa7d4bd05fc7c2994f6997a79cc6890bca44
46ebbbe5dc73148d66410fd0337b1e6683472128c983e8e2578200b9e3ca548c
certutil -hashfile <file> SHA256;
on Android, hash the downloaded .apk on a computer before you move
it to the phone, or use any file-hashing app. Nothing here is signed by an authority your device
already trusts — by design — so it will warn about an unrecognized app; the checksum is the
real check. The machine-readable manifest is at
releases-manifest.json.