Make the download page compliant with Apache's requirements
diff --git a/src/pages/download/release-0.7.1.mdx b/src/pages/download/release-0.7.1.mdx
index 242c41a..513d366 100644
--- a/src/pages/download/release-0.7.1.mdx
+++ b/src/pages/download/release-0.7.1.mdx
@@ -10,17 +10,39 @@
 If you are interested in contributing to the project, please contact us on the mailing list or on GitHub.
 We will be happy to help you get started.
 
+## Release notes
+
 The **release notes** are available here:
 
 https://github.com/apache/incubator-baremaps/releases/tag/v0.7.1
 
-The **artifacts** are available here:
+## Signing keys
 
-https://dist.apache.org/repos/dist/release/incubator/baremaps/0.7.1
+The **PGP** keys used to sign this release are available here:
 
-The **hashes** of the artifacts are as follows:
+https://downloads.apache.org/incubator/baremaps/KEYS
 
-```
-d91dd0f1ebc30a24c7660f6099032eb3b0bc0b36db867dee85e2f8fb6da18113f4b2381fc34a757eb1c0e91522372c66ea75faadc37680cf4c3177ca4eef97a1  ./baremaps-0.7.1-incubating-src.tar.gz
-5023a16b337e75edd58d06b024fb840ad03030885011ab592919aeddc9b1e32fec9969b41037cbb36bb65749e8b05e9da423acac674eba9174ba5001e8fd5074  ./baremaps-0.7.1-incubating-bin.tar.gz
-```
+## Source distribution
+
+The **source** distribution is available here:
+
+https://www.apache.org/dyn/closer.lua/incubator/baremaps/0.7.1/baremaps-0.7.1-incubating-src.tar.gz
+
+The SHA **checksum** for the source distribution is available here:
+
+https://downloads.apache.org/incubator/baremaps/0.7.1/baremaps-0.7.1-incubating-src.tar.gz.sha512
+
+## Binary distribution
+
+The **binary** distribution is available here:
+
+https://www.apache.org/dyn/closer.lua/incubator/baremaps/0.7.1/baremaps-0.7.1-incubating-bin.tar.gz
+
+The SHA **checksum** for the source distribution is available here:
+
+https://downloads.apache.org/incubator/baremaps/0.7.1/baremaps-0.7.1-incubating-bin.tar.gz.sha512
+
+## Verifying releases
+
+It is essential that you verify the integrity of the downloaded files using the PGP or SHA signatures.
+Please read [Verifying Apache HTTP Server Releases](https://www.apache.org/info/verification.html) for more information on why you should verify our releases.