I have just stumbled across this problem
Realizing that the mirror page is completely useless is quite devastating.
At the moment the shown hashes cannot proof anything... Assuming someone tampering with the http connection, not even the correctness of a downloaded file can be proofed.
Please consider posting the current stable releases' hashes in this forum (or as already suggested on the download page) so we don't need to wait some arbitrary short term time to run our beloved libreelec
P.S.: Sorry if I sound too harsh