Canonical SHA-256 checksums for every published build. This page lives at the on-chain
name releases.silentmode.bch; the name pins where it is served from, so a tampered
mirror cannot change what you check against here.
6bbccf9ccc26e5ade3bdd9ce777942266085603042f31beb59b6f7ed04c2367a
9f27e2d25e668b22beba3fab4da8892b2437f7ac53b5fff9b4f186eb19cd67c1
c5efae43af6cc163f468f1dc73d08939db32a9a6db52298ba18b2d9a2aee1292
635c8f04d44ef855a8390b9eeddb8cd2d50622e81cc4e5004e8daffc1bb0425c
46ebbbe5dc73148d66410fd0337b1e6683472128c983e8e2578200b9e3ca548c
certutil -hashfile <file> SHA256;
on Android, hash the downloaded .apk on a computer before you move
it to the phone, or use any file-hashing app. Nothing here is signed by an authority your device
already trusts — by design — so it will warn about an unrecognized app; the checksum is the
real check. The machine-readable manifest is at
releases-manifest.json.