fix download links for KEYS file and signatures
diff --git a/content/download.html b/content/download.html
index d3a8514..444426e 100644
--- a/content/download.html
+++ b/content/download.html
@@ -27,9 +27,9 @@
 <p>The Apache PDFBox community provides feature and bugfix releases.</p>
 
 <ul>
-    <li>Feature release for PDFBox 3.0.3 &mdash; <a href="https://www.apache.org/dist/pdfbox/3.0.3/RELEASE-NOTES.txt">3.0.3</a> (requires Java 8)</li>
-    <li>Feature release for PDFBox 2.0.x &mdash; <a href="https://www.apache.org/dist/pdfbox/2.0.33/RELEASE-NOTES.txt">2.0.33</a> (requires Java 6)</li>
-    <li>Feature release of JBIG2 ImageIO plugin 3.0.x &mdash; <a href="https://www.apache.org/dist/pdfbox/jbig2-imageio/3.0.4/RELEASE-NOTES.txt">3.0.4</a> (requires Java 6)</li>
+    <li>Feature release for PDFBox 3.0.x &mdash; <a href="https://downloads.apache.org/pdfbox/3.0.3/RELEASE-NOTES.txt">3.0.3</a> (requires Java 8)</li>
+    <li>Feature release for PDFBox 2.0.x &mdash; <a href="https://downloads.apache.org/pdfbox/2.0.33/RELEASE-NOTES.txt">2.0.33</a> (requires Java 6)</li>
+    <li>Feature release of JBIG2 ImageIO plugin 3.0.x &mdash; <a href="https://downloads.apache.org/pdfbox/jbig2-imageio/3.0.4/RELEASE-NOTES.txt">3.0.4</a> (requires Java 6)</li>
     <li><a href="#oldreleases">Previous releases</a></li>
 </ul>
 
@@ -57,20 +57,20 @@
         <tr>
             <td>PDFBox standalone</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/pdfbox-app-3.0.3.jar">pdfbox-app-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-app-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-app-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-app-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-app-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>Debugger standalone</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/debugger-app-3.0.3.jar">debugger-app-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/debugger-app-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/debugger-app-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/debugger-app-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/debugger-app-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>Preflight standalone</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/preflight-app-3.0.3.jar">preflight-app-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/preflight-app-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/preflight-app-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/preflight-app-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/preflight-app-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td colspan="4"><strong>Libraries of each subproject</strong></td>
@@ -78,44 +78,44 @@
         <tr>
             <td>pdfbox</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/pdfbox-3.0.3.jar">pdfbox-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>pdfbox-io</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/pdfbox-io-3.0.3.jar">pdfbox-io-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-io-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-io-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-io-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-io-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>fontbox</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/fontbox-3.0.3.jar">fontbox-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/fontbox-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/fontbox-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/fontbox-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/fontbox-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>preflight</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/preflight-3.0.3.jar">preflight-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/preflight-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/preflight-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/preflight-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/preflight-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>xmpbox</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/xmpbox-3.0.3.jar">xmpbox-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/xmpbox-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/xmpbox-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/xmpbox-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/xmpbox-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>pdfbox-tools</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/pdfbox-tools-3.0.3.jar">pdfbox-tools-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-tools-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-tools-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-tools-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-tools-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>pdfbox-debugger</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/pdfbox-debugger-3.0.3.jar">pdfbox-debugger-3.0.3.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-debugger-3.0.3.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-debugger-3.0.3.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-debugger-3.0.3.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-debugger-3.0.3.jar.sha512">SHA512</a></td>
         </tr>
     </tbody>
     <tbody>
@@ -126,20 +126,20 @@
         <tr>
             <td>PDFBox standalone</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/pdfbox-app-2.0.33.jar">pdfbox-app-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-app-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-app-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-app-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-app-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>Debugger standalone</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/debugger-app-2.0.33.jar">debugger-app-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/debugger-app-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/debugger-app-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/debugger-app-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/debugger-app-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>Preflight standalone</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/preflight-app-2.0.33.jar">preflight-app-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/preflight-app-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/preflight-app-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/preflight-app-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/preflight-app-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td colspan="4"><strong>Libraries of each subproject</strong></td>
@@ -147,38 +147,38 @@
         <tr>
             <td>pdfbox</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/pdfbox-2.0.33.jar">pdfbox-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>fontbox</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/fontbox-2.0.33.jar">fontbox-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/fontbox-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/fontbox-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/fontbox-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/fontbox-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>preflight</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/preflight-2.0.33.jar">preflight-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/preflight-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/preflight-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/preflight-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/preflight-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>xmpbox</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/xmpbox-2.0.33.jar">xmpbox-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/xmpbox-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/xmpbox-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/xmpbox-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/xmpbox-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>pdfbox-tools</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/pdfbox-tools-2.0.33.jar">pdfbox-tools-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-tools-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-tools-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-tools-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-tools-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td>pdfbox-debugger</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/pdfbox-debugger-2.0.33.jar">pdfbox-debugger-2.0.33.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-debugger-2.0.33.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-debugger-2.0.33.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-debugger-2.0.33.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-debugger-2.0.33.jar.sha512">SHA512</a></td>
         </tr>
     </tbody>
     <tbody>
@@ -186,8 +186,8 @@
             <td rowspan="1"><strong>JBIG2<br>3.0.4</strong><br><small>feature</small></td>
             <td>JBIG2 ImageIO plugin</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4.jar">jbig2-imageio-3.0.4.jar</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4.jar.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4.jar.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4.jar.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4.jar.sha512">SHA512</a></td>
         </tr>
     </tbody>
 </table>
@@ -209,22 +209,22 @@
             <td><strong>PDFBox<br>3.0.3</strong><br><small>feature</small></td>
             <td>Source ZIP file incl. examples</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/3.0.3/pdfbox-3.0.3-src.zip">pdbox-3.0.3-src.zip</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-3.0.3-src.zip.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/3.0.3/pdfbox-3.0.3-src.zip.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-3.0.3-src.zip.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/3.0.3/pdfbox-3.0.3-src.zip.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td><strong>PDFBox<br>2.0.33</strong><br><small>feature</small></td>
             <td>Source ZIP file incl. examples</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/2.0.33/pdfbox-2.0.33-src.zip">pdfbox-2.0.33-src.zip</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-2.0.33-src.zip.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/2.0.33/pdfbox-2.0.33-src.zip.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-2.0.33-src.zip.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/2.0.33/pdfbox-2.0.33-src.zip.sha512">SHA512</a></td>
         </tr>
         <tr>
             <td><strong>JBIG2<br>3.0.4</strong><br><small>feature</small></td>
             <td>Source ZIP file</td>
             <td><a href="https://www.apache.org/dyn/closer.lua/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4-src.zip">jbig2-imageio-3.0.4-src.zip</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4-src.zip.asc">ASC</a></td>
-            <td><a href="https://www.apache.org/dist/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4-src.zip.sha512">SHA512</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4-src.zip.asc">ASC</a></td>
+            <td><a href="https://downloads.apache.org/pdfbox/jbig2-imageio/3.0.4/jbig2-imageio-3.0.4-src.zip.sha512">SHA512</a></td>
         </tr>
     </tbody>
 </table>
@@ -240,9 +240,9 @@
 
 <p>
     The PGP signatures can be verified using PGP or GPG. First download the
-    <a href="https://www.apache.org/dist/pdfbox/KEYS">KEYS</a> file as well as the .asc signature files for the
+    <a href="https://downloads.apache.org/pdfbox/KEYS">KEYS</a> file as well as the .asc signature files for the
     relevant release packages. Make sure you get these
-    files from the <a href="https://www.apache.org/dist/pdfbox">main distribution directory</a>, rather than
+    files from the <a href="https://downloads.apache.org/pdfbox">main distribution directory</a>, rather than
     from a mirror. Then verify the signatures using
 </p>