diff --git a/package/zip/zip.hash b/package/zip/zip.hash
index eb4bbf3b03..cbb96beb31 100644
--- a/package/zip/zip.hash
+++ b/package/zip/zip.hash
@@ -1,3 +1,3 @@
 # Locally calculated from download (no sig, hash)
-sha256  f0e8bb1f9b7eb0b01285495a2699df3a4b766784c1765a8f1aeedf63c0806369  zip30.tgz
+sha256  f0e8bb1f9b7eb0b01285495a2699df3a4b766784c1765a8f1aeedf63c0806369  zip30.tar.gz
 sha256  8ecd6c1bab449127eb665cef1561e73a8bce52e217375f6f466939e137b1e110  LICENSE
diff --git a/package/zip/zip.mk b/package/zip/zip.mk
index 3aa59e7ba7..0457ba9414 100644
--- a/package/zip/zip.mk
+++ b/package/zip/zip.mk
@@ -5,9 +5,9 @@
 ################################################################################
 
 ZIP_VERSION = 3.0
-# The version is really 3.0, but the tarball is named zip30.tgz
-ZIP_SOURCE = zip$(subst .,,$(ZIP_VERSION)).tgz
-ZIP_SITE = ftp://ftp.info-zip.org/pub/infozip/src
+# The version is really 3.0, but the tarball is named zip30.tar.gz
+ZIP_SOURCE = zip$(subst .,,$(ZIP_VERSION)).tar.gz
+ZIP_SITE = https://sourceforge.net/projects/infozip/files/Zip%203.x%20%28latest%29/$(ZIP_VERSION)
 ZIP_LICENSE = Info-ZIP
 ZIP_LICENSE_FILES = LICENSE
 ZIP_CPE_ID_VENDOR = info-zip_project