SHA-256 is the best general default
SHA-256 is widely used for download verification and provides a much stronger collision margin than MD5 or SHA-1. MD5 and SHA-1 remain useful when a vendor publishes only those legacy checksums, but they should not be chosen for new security-sensitive integrity schemes.