diff --git a/.gitignore b/.gitignore
index fe326b0..0d02e2e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,5 @@
 /fuse-3.13.1.tar.gz
 /fuse-3.14.0.tar.gz
 /fuse-3.14.1.tar.gz
+/fuse-3.16.1.tar.gz
+/fuse-3.16.1.tar.gz.sig
diff --git a/fuse-3.16.pub b/fuse-3.16.pub
new file mode 100644
index 0000000..13fdcb3
--- /dev/null
+++ b/fuse-3.16.pub
@@ -0,0 +1,2 @@
+untrusted comment: signify public key
+RWQtnc3WSoYwHGAdfvtTTVX8RsAXrNwMb8xqVwlY8lYY2Fxn2QUDiPYK
diff --git a/fuse3.spec b/fuse3.spec
index 086ea44..3aaf4cb 100644
--- a/fuse3.spec
+++ b/fuse3.spec
@@ -5,16 +5,22 @@
 %global _udevrulesdir %{_prefix}/lib/udev/rules.d
 %endif
 
+%global xyz_version 3.16.1
+%global xy_version %(sed 's/\\(.*\\)\\..*/\\1/'<<<%{xyz_version})
+
 Name:		fuse3
-Version:	3.14.1
-Release:	3%{?dist}
+Version:	%{xyz_version}
+Release:	1%{?dist}
 Summary:	File System in Userspace (FUSE) v3 utilities
 License:	GPL+
 URL:		http://fuse.sf.net
-Source0:	https://github.com/libfuse/libfuse/archive/fuse-%{version}.tar.gz
-Source1:	fuse.conf
+Source0:	https://github.com/libfuse/libfuse/releases/download/fuse-%{version}/fuse-%{version}.tar.gz
+Source1:	https://github.com/libfuse/libfuse/releases/download/fuse-%{version}/fuse-%{version}.tar.gz.sig
+Source2:	https://raw.githubusercontent.com/libfuse/libfuse/master/signify/fuse-%{xy_version}.pub
+Source3:	fuse.conf
 Patch0:         fuse3-gcc11.patch
 
+BuildRequires:	signify
 BuildRequires:	which
 %if ! 0%{?el6}
 Conflicts:	filesystem < 3
@@ -78,7 +84,11 @@ Common files for FUSE v2 and FUSE v3.
 %endif
 
 %prep
-%setup -n libfuse-fuse-%{version}
+# Fuse is using signify rather than PGG since 3.15.1 For more details see:
+# 	https://github.com/libfuse/libfuse/releases/tag/fuse-3.15.1
+signify -V -m  '%{SOURCE0}' -p '%{SOURCE2}'
+
+%setup -n fuse-%{version}
 %patch -P0 -p1
 
 %build
@@ -137,7 +147,7 @@ rm -f %{buildroot}/etc/init.d/fuse3
 rm -f %{buildroot}%{_sysconfdir}/fuse.conf
 %else
 # Install config-file
-install -p -m 0644 %{SOURCE1} %{buildroot}%{_sysconfdir}
+install -p -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}
 %endif
 
 # Delete pointless udev rules (brc#748204)
@@ -178,6 +188,10 @@ rm -f %{buildroot}%{_udevrulesdir}/99-fuse3.rules
 %endif
 
 %changelog
+* Wed Aug 09 2023 Pavel Reichl <preichl@redhat.com> - 3.16.1-1
+- update to 3.16.1
+- Add tarball signature verification
+
 * Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.14.1-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
 
diff --git a/sources b/sources
index dc9cce0..6f66dca 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-SHA512 (fuse-3.14.1.tar.gz) = 689cc02999587afbd274dcc614f58a8c03b3264f99f96dbae098e558887c17b82ffdddf63b88d202f89c1dce2a6f4e7719317e308ae13b7b749fb26b0f86e43f
+SHA512 (fuse-3.16.1.tar.gz) = 3f07919a7451a30d05bc174e2f8ec2c65b6225e63b4bbb40f2b097d760d4aa9b753a1da5da4874855094a01979fc4313ffabce54668ed20a6900f5eed92912c8
+SHA512 (fuse-3.16.1.tar.gz.sig) = 4559363c2ab488433c6b1339ad3a4ea500281a1e2c1bd31859cf1764151a77d9ba1173cc1ab7d9f9e92d1a7f2fc7e2cda091fc283fa4b285fa0a3f4449c419b6