When specifying a filename, the filename without the .zip suffix is contained in the resulting zip file. The md5sums for the first three above are different because of the difference in the folder names contained in the zips. The actual althttpd.c source code files are identical however. This also explains why the last three with the same name have matching checksums. I believe the problem with all the examples on this page, including the one in my first post, is that we should be using r= instead of ci= With ci= I think it is ignored and you just always get the latest trunk check-in. Testing with r= gives me the expected results. Sorry for causing confusion.