Sorry, but I'm afraid that it would be relatively easy to fake some public rating system. I don't agree with some dedicated-server authentication method.
I think the only way to ensure the integrity of the downloaded file is by adding some CRC code to each file, so we can check the downloaded file as we usually do with ISO images or .zip ones.