The currently selected mirror is https://dlcdn.apache.org/. If you encounter a problem with this mirror, please select another mirror. If all mirrors are failing, there are backup mirrors (at the end of the mirrors list) that should be available.
You may also consult the complete list of mirrors.
Note: when downloading from a mirror please check the md5sum and verify the OpenPGP compatible signature from the main Apache site. These can be downloaded by following the links above. This KEYS file contains the public keys used for signing release. It is recommended that (when possible) a Web of trust is used to confirm the identity of these keys.