diff --git a/Makefile b/Makefile
index dd45a6204..429131fbc 100644
--- a/Makefile
+++ b/Makefile
@@ -78,7 +78,7 @@ clean:
 
 build: $(BINARIES)
 
-build-cross: $(CROSS_TARBALLS)
+build-cross: $(CROSS_TARBALLS) dist/subctl-checksums.txt
 
 licensecheck: build | bin/lichen
 	bin/lichen -c .lichen.yaml $(BINARIES)
@@ -98,6 +98,9 @@ dist/subctl-%.tar.gz: cmd/bin/subctl-%
 	mkdir -p dist
 	tar -czf $@ --transform "s/^cmd.bin/subctl-$(VERSION)/" $<
 
+dist/subctl-checksums.txt: $(CROSS_TARBALLS)
+	cd $(@D) && sha256sum $(^F) >> $(@F)
+
 # Versions may include hyphens so it's easier to use $(VERSION) than to extract them from the target
 
 # Special case for Linux container builds