Assuming the file was downloaded over http is this possible? I'm guessing there could be some way to do it using a hash and a timestamp however I'm not sure how you could prove nothing was tampered with including the downloaded file itself.
EDIT: As vonbrand suggested if the origin site provided a signed cert it would be a start. However, if the site doesn't provide any certs is there a clever way to loop in some third party?