diff --git a/discover-5.13.90.tar.xz.sig b/discover-5.13.90.tar.xz.sig
new file mode 100644
index 0000000..a6bc543
--- /dev/null
+++ b/discover-5.13.90.tar.xz.sig
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELR1bBYg1d4fenuIl7JTRj38FmX4FAluaky8ACgkQ7JTRj38F
+mX5f9wgAmWf1W+EPrElLYXxob4KtKmw523WFE5xYHXg8Tth8fOjJlmUDAqY8VxtU
+qhDpIXDHrCj/srj+cGiZarqaYWZvogF970L2aL/i94IZDA+yXZSzOsZ+QKZFBEPq
+WRxF63TRceS8vDsgqyP6QMUAFkMYDyJ3f5w5AqjXUUKuVsF+ntagSoghJfVpKPcA
+Zm66h1WXIRJ97trUSrRA67rE27JdWTa3+Vp1PwFko2CAgFTBq9hadAVT6AaKf5qu
+aeer9ALFP8gV6X9ea33+j/Qq3tW1g1QFBKxK7uFqW1TmdHgK7glSMcSVHPyRuTUx
+5no06NSJ5TOerKWQg0E1wRF8luNAPg==
+=SWRh
+-----END PGP SIGNATURE-----
diff --git a/discover.changes b/discover.changes
index bb62bb9..47b4153 100644
--- a/discover.changes
+++ b/discover.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Sep 15 16:25:26 UTC 2018 - fabian@ritter-vogt.de
+
+- Add tarball signature and keyring containing keys of release managers
+  Jonathan Riddell and Bhushan Shah
+
 -------------------------------------------------------------------
 Sat Sep 15 14:19:10 UTC 2018 - Wolfgang Bauer <wbauer@tmo.at>
 
diff --git a/discover.spec b/discover.spec
index 61edeb3..b71fad2 100644
--- a/discover.spec
+++ b/discover.spec
@@ -25,6 +25,10 @@ License:        GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later
 Group:          System/GUI/KDE
 Url:            https://quickgit.kde.org/?p=discover.git
 Source:         http://download.kde.org/unstable/plasma/%{version}/discover-%{version}.tar.xz
+%if %{with lang}
+Source1:        http://download.kde.org/unstable/plasma/%{version}/discover-%{version}.tar.xz.sig
+Source2:        plasma.keyring
+%endif
 # PATCH-FIX-OPENSUSE
 Patch1:         0001-Warning-for-FlatHub.patch
 %if 0%{?suse_version} < 1330
diff --git a/plasma.keyring b/plasma.keyring
new file mode 100644
index 0000000..5e9faf8
Binary files /dev/null and b/plasma.keyring differ