https://www.torproject.org/dist/tor-0.2.9.8.tar.gz
https://www.torproject.org/dist/tor-0.2.9.8.tar.gz.asc
https://www.torproject.org/dist/tor-0.3.0.1-alpha.tar.gz
https://www.torproject.org/dist/tor-0.3.0.1-alpha.tar.gz.asc
Check the signatures before unpacking. It would be nice if they would post the SHA256 and SHA512 sums as well. Here's what I'm getting:
SHA 256
fbdd33d3384574297b88744622382008d1e0f9ddd300d330746c464b7a7d746a tor-0.2.9.8.tar.gz
7013353f0cbd2af8c0144f6167339f6eb252eb35ca9a2db2971310171108b064 tor-0.3.0.1-alpha.tar.gz
SHA512
6a43a56ebed7b24ccdd2474406f25347819d4efec4916bdb2e725177b34e233632cc17e68c823efa3d0aad4a5bd13e00a5077cdfeb8830a612253a03ab91b622 tor-0.2.9.8.tar.gz
181cada87ece0f1d6f852948a66fdcff013b8db6e3d39a635ef8050c4e7671ade186925297025888151753e6280f7eea4511f2051a19ddac79834caf8f7ba9ea tor-0.3.0.1-alpha.tar.gz