diff --git a/mxml.changes b/mxml.changes
index eab3d2c..6273c04 100644
--- a/mxml.changes
+++ b/mxml.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Mar  7 13:14:37 UTC 2020 - Adam Majer <amajer@suse.com>
+
+- Add keyring
+- Fix source URLs to point to actual releases
+
 -------------------------------------------------------------------
 Thu Mar  5 23:39:46 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
 
diff --git a/mxml.keyring b/mxml.keyring
new file mode 100644
index 0000000..f237df5
Binary files /dev/null and b/mxml.keyring differ
diff --git a/mxml.spec b/mxml.spec
index 01e6e70..cfdae8e 100644
--- a/mxml.spec
+++ b/mxml.spec
@@ -15,6 +15,7 @@
 # Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
 
+%define library_name libmxml1
 
 Name:           mxml
 Version:        3.1
@@ -25,9 +26,11 @@ Summary:        Small XML Parsing Library
 License:        Apache-2.0
 Group:          Development/Libraries/C and C++
 URL:            https://www.msweet.org/mxml
-Source:         https://github.com/michaelrsweet/mxml/archive/v%{version}/%{name}-%{version}.tar.gz
-Source2:        https://github.com/michaelrsweet/mxml/archive/v%{version}/%{name}-%{version}.tar.gz.sig
-Source1:        baselibs.conf
+Source:         https://github.com/michaelrsweet/mxml/releases/download/v%{version}/mxml-%{version}.tar.gz
+Source1:        https://github.com/michaelrsweet/mxml/releases/download/v%{version}/mxml-%{version}.tar.gz.sig
+# key from https://www.msweet.org/pgp.html
+Source2:        mxml.keyring
+Source10:       baselibs.conf
 BuildRequires:  pkgconfig
 
 %description
@@ -37,8 +40,6 @@ nonstandard libraries.
 
 This package holds the commandline tools for mxml.
 
-%define library_name libmxml1
-
 %package -n %{library_name}
 Summary:        Shared library for mxml
 Group:          System/Libraries