Need hash sums for .EXE if from sourceforge

[BobH]

IIRC, prior to 2.10.4 the Windows installer was downloaded directly from the pidgin.im site. Now, however, the download button gets you to some random mirror of sourceforge. I don't mind that, but since the installer has an "unknown publisher" I'd like to confirm (e.g., via md5 or sha1 hash) that the download I am getting from sourceforge hasn't been tampered with. Can someone point me to the hash sums?