Does the remote server provide such a checksum, perhaps as a similarly named file in the same directory? If so, download that, too, and compare its contents with the checksum that you will generate locally of your downloaded version. If not, is the remote server under your control? If not, can you ask the managers of the remote server to provide such checksums?

For md5, see Digest::MD5