diff --git a/signify-30.tar.xz b/signify-30.tar.xz
deleted file mode 100644
index 77dcd41..0000000
--- a/signify-30.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f68406c3085ef902e85500e6c0b90e4c3f56347e5efffc0da7b6fb47803c8686
-size 73824
diff --git a/signify-31.tar.xz b/signify-31.tar.xz
new file mode 100644
index 0000000..4006cfa
--- /dev/null
+++ b/signify-31.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1155fd9eeed4a8aa20476b2333d251953ec5d52338d943a770db5b78dd8d2b74
+size 83480
diff --git a/signify-31.tar.xz.asc b/signify-31.tar.xz.asc
new file mode 100644
index 0000000..857e973
--- /dev/null
+++ b/signify-31.tar.xz.asc
@@ -0,0 +1,6 @@
+-----BEGIN PGP SIGNATURE-----
+
+iF0EABECAB0WIQRao7wzT9fjNp58d7KRxVnb5MkSOwUCYi5jSgAKCRCRxVnb5MkS
+O5XsAJ9Xl1R5nptUTJuGeuXd7+B1NiB3CgCffwe+HGCeDRnKkJdHgIghs38S1eA=
+=/ci/
+-----END PGP SIGNATURE-----
diff --git a/signify.changes b/signify.changes
index 37ea3ee..72962c3 100644
--- a/signify.changes
+++ b/signify.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Thu Mar  2 20:36:24 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Update to version 31:
+  * provides a bundled libbsd (not used in the openSUSE package)
+- needs libbsd 0.11.0 for freezero
+- run tests
+- add upstream signing key and verify source signature
+
 -------------------------------------------------------------------
 Wed May 19 19:12:10 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
 
diff --git a/signify.keyring b/signify.keyring
new file mode 100644
index 0000000..0f404f2
--- /dev/null
+++ b/signify.keyring
@@ -0,0 +1,72 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Comment: 5AA3 BC33 4FD7 E336 9E7C  77B2 91C5 59DB E4C9 123B
+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+=HD/s
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/signify.spec b/signify.spec
index f172ddb..6f4ec26 100644
--- a/signify.spec
+++ b/signify.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package signify
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,15 +17,18 @@
 
 
 Name:           signify
-Version:        30
+Version:        31
 Release:        0
 Summary:        OpenBSD tool to sign and verify signatures on files (portable version)
 License:        BSD-3-Clause
 Group:          Productivity/Networking/Security
 URL:            https://github.com/aperezdc/signify
 Source0:        %{url}/releases/download/v%{version}/signify-%{version}.tar.xz
+Source1:        %{url}/releases/download/v%{version}/signify-%{version}.tar.xz.asc
+# https://github.com/aperezdc/signify/blob/master/README.md#release-signing
+Source2:        %{name}.keyring
 BuildRequires:  pkgconfig
-BuildRequires:  pkgconfig(libbsd) >= 0.8
+BuildRequires:  pkgconfig(libbsd) >= 0.11.0
 
 %description
 Signify - Sign and Verify.
@@ -45,6 +48,9 @@ export EXTRA_CFLAGS="%{optflags} -D_GNU_SOURCE"
 export PREFIX="%{_prefix}"
 %make_install
 
+%check
+%make_build check
+
 %files
 %license COPYING
 %doc README.md CHANGELOG.md