Updated the link to the KEYS file.
diff --git a/src/site/xdoc/download.xml.vm b/src/site/xdoc/download.xml.vm
index 9ba6eb1..d54e6f7 100644
--- a/src/site/xdoc/download.xml.vm
+++ b/src/site/xdoc/download.xml.vm
@@ -154,7 +154,7 @@
<p><strong>Note:</strong> when downloading from a mirror please check the <a href="http://www.apache.org/dev/release-signing#md5" class="externalLink" title="External Link">md5sum</a> and verify
the <a href="http://www.apache.org/dev/release-signing#openpgp" class="externalLink" title="External Link">OpenPGP</a>
compatible signature from the main Apache site. These can be downloaded by
-following the links above. This <a href="http://www.apache.org/dist/ws/sandesha2/KEYS" class="externalLink" title="External Link">KEYS</a> file contains the
+following the links above. This <a href="http://www.apache.org/dist/axis/axis2/java/sandesha/KEYS" class="externalLink" title="External Link">KEYS</a> file contains the
public keys used for signing release. It is recommended that (when possible)
a <a href="http://www.apache.org/dev/release-signing#web-of-trust" class="externalLink" title="External Link">web of
trust</a> is used to confirm the identity of these keys.</p>
