When using http://www.debian.org/distrib/netinst I had the same issue as Florentin. Please link to the SHA1SUM and SHA1SUM.sign files. md5sum is old fashioned and can be skipped.