[JOHNZON-410] fix download links for KEYS/hashes/sigs
diff --git a/src/site/markdown/download.md b/src/site/markdown/download.md
index 30b00d7..41a4329 100644
--- a/src/site/markdown/download.md
+++ b/src/site/markdown/download.md
@@ -28,7 +28,7 @@
 
 ## KEYS for verifying Apache releases
 
-Please use the Johnzon [KEYS](https://www.apache.org/dyn/closer.lua/johnzon/KEYS) file to validate our releases.
+Please use the Johnzon [KEYS](https://downloads.apache.org/johnzon/KEYS) file to validate our releases.
 Read more about [how we sign Apache Releases](http://www.apache.org/info/verification.html)
 
 
@@ -47,11 +47,11 @@
 #### Source
 Should you want to build any of the above binaries, this source bundle is the right one and covers them all.
 * [apache-johnzon-2.0.1-src.zip](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.zip)
-* [apache-johnzon-2.0.1-src.zip.sha512](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.zip.sha512)
-* [apache-johnzon-2.0.1-src.zip.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.zip.asc)
+* [apache-johnzon-2.0.1-src.zip.sha512](https://downloads.apache.org/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.zip.sha512)
+* [apache-johnzon-2.0.1-src.zip.asc](https://downloads.apache.org/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.zip.asc)
 * [apache-johnzon-2.0.1-src.tar.gz](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.tar.gz)
-* [apache-johnzon-2.0.1-src.tar.gz.sha512](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.tar.gz.sha512)
-* [apache-johnzon-2.0.1-src.tar.gz.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.tar.gz.asc)
+* [apache-johnzon-2.0.1-src.tar.gz.sha512](https://downloads.apache.org/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.tar.gz.sha512)
+* [apache-johnzon-2.0.1-src.tar.gz.asc](https://downloads.apache.org/johnzon/johnzon-2.0.1/apache-johnzon-2.0.1-src.tar.gz.asc)
 
 ## Johnzon-1.2.x
 
@@ -65,11 +65,11 @@
 #### Source
 Should you want to build any of the above binaries, this source bundle is the right one and covers them all.
 * [apache-johnzon-1.2.21-src.zip](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.zip)
-* [apache-johnzon-1.2.21-src.zip.sha512](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.zip.sha512)
-* [apache-johnzon-1.2.21-src.zip.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.zip.asc)
+* [apache-johnzon-1.2.21-src.zip.sha512](https://downloads.apache.org/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.zip.sha512)
+* [apache-johnzon-1.2.21-src.zip.asc](https://downloads.apache.org/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.zip.asc)
 * [apache-johnzon-1.2.21-src.tar.gz](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.tar.gz)
-* [apache-johnzon-1.2.21-src.tar.gz.sha512](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.tar.gz.sha512)
-* [apache-johnzon-1.2.21-src.tar.gz.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.tar.gz.asc)
+* [apache-johnzon-1.2.21-src.tar.gz.sha512](https://downloads.apache.org/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.tar.gz.sha512)
+* [apache-johnzon-1.2.21-src.tar.gz.asc](https://downloads.apache.org/johnzon/johnzon-1.2.21/apache-johnzon-1.2.21-src.tar.gz.asc)
 
 ## Johnzon-1.0.x
 
@@ -80,21 +80,21 @@
 The binary distribution contains all Johnzon modules.
 
 * [apache-johnzon-1.0.2-bin.zip](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.zip)
-* [apache-johnzon-1.0.2-bin.zip.sha256](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.zip.sha256)
-* [apache-johnzon-1.0.2-bin.zip.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.zip.asc)
+* [apache-johnzon-1.0.2-bin.zip.sha256](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.zip.sha256)
+* [apache-johnzon-1.0.2-bin.zip.asc](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.zip.asc)
 * [apache-johnzon-1.0.2-bin.tar.gz](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.tar.gz)
-* [apache-johnzon-1.0.2-bin.tar.gz.sha256](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.tar.gz.sha256)
-* [apache-johnzon-1.0.2-bin.tar.gz.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.tar.gz.asc)
+* [apache-johnzon-1.0.2-bin.tar.gz.sha256](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.tar.gz.sha256)
+* [apache-johnzon-1.0.2-bin.tar.gz.asc](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-bin.tar.gz.asc)
 
 #### Source
 Should you want to build any of the above binaries, this source bundle is the right one and covers them all.
 
 * [apache-johnzon-1.0.2-src.zip](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.zip)
-* [apache-johnzon-1.0.2-src.zip.sha256](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.zip.sha256)
-* [apache-johnzon-1.0.2-src.zip.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.zip.asc)
+* [apache-johnzon-1.0.2-src.zip.sha256](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.zip.sha256)
+* [apache-johnzon-1.0.2-src.zip.asc](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.zip.asc)
 * [apache-johnzon-1.0.2-src.tar.gz](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.tar.gz)
-* [apache-johnzon-1.0.2-src.tar.gz.sha256](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.tar.gz.sha256)
-* [apache-johnzon-1.0.2-src.tar.gz.asc](https://www.apache.org/dyn/closer.lua/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.tar.gz.asc)
+* [apache-johnzon-1.0.2-src.tar.gz.sha256](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.tar.gz.sha256)
+* [apache-johnzon-1.0.2-src.tar.gz.asc](https://downloads.apache.org/johnzon/johnzon-1.0.2/apache-johnzon-1.0.2-src.tar.gz.asc)
 -------
 
 ### Maven Dependencies