it says: kernel-2.6.9-34.EL.src.rpm: (sha1) dsa sha1 MD5 GPG NOT OK kernel-2.6.9-34.EL.src.rpm.save: (sha1) dsa sha1 MD5 GPG NOT OK and i am getting different sizes: -rw-rw-r-- 1 joey joey 44354986 Mar 13 15:28 kernel-2.6.9-34.EL.src.rpm -rw-r--r-- 1 root root 44363373 Mar 13 14:41 kernel-2.6.9-34.EL.src.rpm.save i haven't been tracking which mirror i'm hitting, so i don't know which file came from where.