There is a proxy in place on the server end: CloudFlare.
To make sure that's not the problem I changed the DNS settings for the host download.zope.dev to use the straight IP of the server and not go through the CloudFlare proxy. The change may take a little while to propagate through DNS.
I just confirmed the DNS change fixes the buildout issue. The problem appears to be in how zc.buildout and CloudFlare interact on the HTTP request that fetches the extends URLs.