diff --git a/Makefile b/Makefile
index dd45a6204..6f6161041 100644
--- a/Makefile
+++ b/Makefile
@@ -78,7 +78,7 @@ clean:
 
 build: $(BINARIES)
 
-build-cross: $(CROSS_TARBALLS)
+build-cross: $(CROSS_TARBALLS) create_checksums
 
 licensecheck: build | bin/lichen
 	bin/lichen -c .lichen.yaml $(BINARIES)
@@ -98,6 +98,9 @@ dist/subctl-%.tar.gz: cmd/bin/subctl-%
 	mkdir -p dist
 	tar -czf $@ --transform "s/^cmd.bin/subctl-$(VERSION)/" $<
 
+create_checksums: $(CROSS_TARBALLS)
+	cd dist && sha256sum * >> subctl-checksums.txt
+
 # Versions may include hyphens so it's easier to use $(VERSION) than to extract them from the target
 
 # Special case for Linux container builds