The digest

5af571cbf074e6d21a03528d2330792e532ca608f24ac70a143f6b369968ab8c  SmolLM2-135M-Instruct.safetensors

That line is in sha256sum format, so it can be checked mechanically rather than by eye. Save it next to the file and let the tool do the comparison:

curl -sL https://tinymodels.co/models/smollm2-135m-instruct/download -o SmolLM2-135M-Instruct.safetensors
curl -s https://tinymodels.co/models/smollm2-135m-instruct/checksum?format=txt -o SmolLM2-135M-Instruct.safetensors.sha256
shasum -a 256 -c SmolLM2-135M-Instruct.safetensors.sha256
# SmolLM2-135M-Instruct.safetensors: OK

What this proves, and what it does not

This digest is the upstream repository's own LFS object id for that file, so it confirms the file you receive is genuinely the publisher's artifact, unchanged. It does not attest that the model is accurate, safe or free of surprises — only that the bytes are the bytes that were published.

Other formats

• plain sha256sum line
• JSON

Going further

Verifying a download walks through this with the commands, and explains what a matching digest does and does not prove.