All downloads are now hosted at sourceforge. Please visit files section for latest downloads
In order to verify the authenticity of the jars please consider checking out the md5 hash and the PGP signature of the file. This document contains a good explanation of how to verify a PGP signature of a software release.