[CentOS] MD5/Checksums for debug files?

Being new at distro SOPs, I don't know if this is an unusual thought.

With a kernel debug package (or any such debug package) would it be
prudent in todays world to have a checksum or signature process to
assure the downloaded file is untampered with and complete?

What prompts this is I just downloaded the kernel packages that Johnny
put up. I had not realized they were so large and thought "TG I'm not on
dial-up anymore".

Anyway, thought I would raise the question.

TIA
--
Bill