Hey chewitt,
I have just stumbled across this problem 
Realizing that the mirror page is completely useless is quite devastating.
At the moment the shown hashes cannot proof anything... Assuming someone tampering with the http connection, not even the correctness of a downloaded file can be proofed.
Please consider posting the current stable releases' hashes in this forum (or as already suggested on the download page) so we don't need to wait some arbitrary short term time to run our beloved libreelec 
Thanks 
P.S.: Sorry if I sound too harsh