One note, while md5 itself may be virtually safe, the fact that the md5 of a file you downloaded matches the one on the website doesn't mean you're safe. If the hacker managed to hack the server and upload his own binary (which has a different md5) it seems pretty reasonable to assume he could have also changed the md5-checksums.html as well to match the ones in his hacked version of the binary.
