The hashes are now generated by downloading from a mirror with a known-good connection because the KDE rotation has several poor mirrors. Packages are still built by downloading from the rotation.