diff --git a/srcpkgs/chromium-widevine/INSTALL b/srcpkgs/chromium-widevine/INSTALL
index 2bf5321f9ae..ab6c56384fc 100644
--- a/srcpkgs/chromium-widevine/INSTALL
+++ b/srcpkgs/chromium-widevine/INSTALL
@@ -1,5 +1,9 @@
 # INSTALL
-DISTFILE="https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb"
+
+checksum=2f60812b021f1a3f9551544b25ae76442433a0e56b622101e120e36d85a24339
+_baseUrl="https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable"
+_filename="google-chrome-stable_${VERSION%_*}-1_amd64.deb"
+DISTFILE="${_baseUrl}/${_filename}"
 BUILD_DIR="$(mktemp -d ${TMPDIR:-/tmp}/$PKGNAME.XXXXXX)"
 case "$ACTION" in
 post)
@@ -8,6 +12,10 @@ post)
     xbps-uhelper fetch "${DISTFILE}>$BUILD_DIR/$PKGNAME.deb"
     # Things that have to happen no matter what
     cd $BUILD_DIR
+    if [ "$(xbps-digest "$PKGNAME.deb")" != $checksum ]; then
+        echo "broken file: $_filename"
+        exit 1
+    fi
     ar x $PKGNAME.deb
     tar xf data.tar.xz --wildcards './opt/google/chrome/WidevineCdm/'
     cd -