diff --git a/include/download-instructions/windows-downloads.php b/include/download-instructions/windows-downloads.php
index a3f78d730d..aca829536e 100644
--- a/include/download-instructions/windows-downloads.php
+++ b/include/download-instructions/windows-downloads.php
@@ -125,7 +125,9 @@ function ws_has_sbom(string $version, string $fullVersion): bool {
 			if (!empty($entry[$type]['path'])) {
 				$p = $entry[$type]['path'];
 				echo "\t", '<p><strong><a href="' . $baseDownloads . $p . '">' . $package_names[$type] . '</a></strong> <span class="size">' . $entry[$type]['size'] . '</span><br>', PHP_EOL;
-				echo "\t", '<span class="sha256">' . ($entry[$type]['sha256'] ?? '') . '</span>', PHP_EOL;
+				if (!empty($entry[$type]['sha256'])) {
+					echo "\t", sha256_html($entry[$type]['sha256']), PHP_EOL;
+				}
 				if ($type === 'zip' && $hasSbom) {
 					echo "\t", '<span class="sbom"><a href="' . $baseDownloads . $p . '.spdx.json">SPDX</a>|<a href="' . $baseDownloads . $p . '.cdx.json">CDX</a></span>', PHP_EOL;
 				}
diff --git a/releases/index.php b/releases/index.php
index b960a1127c..a42b33b4eb 100644
--- a/releases/index.php
+++ b/releases/index.php
@@ -233,12 +233,20 @@ function mk_rel(int $major,
             if (!isset($src["filename"])) {
                 continue;
             }
-            printf('<li><a href="https://museum.php.net/php%d/%s">%s</a></li>',
+            printf('<li><a href="https://museum.php.net/php%d/%s">%s</a>',
                    $major, $src["filename"], $src["name"]);
+            if (isset($src['sha256'])) {
+                echo "<br>\n", sha256_html($src['sha256']);
+            }
+            echo "</li>\n";
         }
         foreach ($windows as $src) {
-            printf('<li><a href="https://museum.php.net/%s/%s">%s</a></li>',
+            printf('<li><a href="https://museum.php.net/%s/%s">%s</a>',
                    ($major == 5 ? "php5" : "win32"), $src["filename"], $src["name"]);
+            if (isset($src['sha256'])) {
+                echo "<br>\n", sha256_html($src['sha256']);
+            }
+            echo "</li>\n";
         }
     }