Update www.apache.org/dist/ links to downloads.apache.org.
diff --git a/_layouts/release.html b/_layouts/release.html
index 1359d4c..2b3961b 100644
--- a/_layouts/release.html
+++ b/_layouts/release.html
@@ -40,7 +40,7 @@
 <p>You <strong>must</strong> <a href="https://www.apache.org/info/verification.html">
 verify the integrity of any downloaded files</a> using the OpenPGP signatures
 we provide with each release. The signatures should be verified against the
-<a href="https://www.apache.org/dist/guacamole/KEYS">KEYS</a>
+<a href="https://downloads.apache.org/guacamole/KEYS">KEYS</a>
 file, which contains the OpenPGP keys of Apache Guacamole's Release Managers.
 Checksums of each released file are also provided.</p>
 
diff --git a/_releases/1.3.0.md b/_releases/1.3.0.md
index 41950fd..db47797 100644
--- a/_releases/1.3.0.md
+++ b/_releases/1.3.0.md
@@ -8,7 +8,7 @@
     CAS and OpenID, bug fixes.
 
 artifact-root: "https://apache.org/dyn/closer.cgi?action=download&filename="
-checksum-root: "https://www.apache.org/dist/"
+checksum-root: "https://downloads.apache.org/"
 download-path: "guacamole/1.3.0/"
 checksum-suffixes:
     "PGP"     : ".asc"