diff --git a/Makefile b/Makefile
index 71fe435..13e901c 100644
--- a/Makefile
+++ b/Makefile
@@ -53,6 +53,13 @@ ${NPKGNAME}: sa-updates.tgz ${EXTRA_RULES} ${NPKGNAME}.orig.tar.gz
 	mkdir -p $@/debian/tree/usr/share/spamassassin-extra
 	cp -a ${EXTRA_RULES} $@/debian/tree/usr/share/spamassassin-extra
 
+${OPKGNAME}.tar.gz:
+	rm -f $@*
+	curl -L -o '$@#1.tmp' 'https://www-eu.apache.org/dist/spamassassin/source/$@{,.asc}'
+	mv $@.tmp $@
+	mv $@.asc.tmp $@.asc
+	gpgv --keyring ./sa-releasekey.gpg $@.asc $@
+
 KAM.cf:
 	wget http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf -O $@.tmp
 	mv KAM.cf.tmp $@
@@ -75,7 +82,7 @@ update-sa: ${SA_UPDATE_GPG_DIR}/.prepared
 upload: ${DEB}
 	tar cf - ${DEB} | ssh -X repoman@repo.proxmox.com -- upload --product pmg --dist stretch
 
-CLEANFILES = *~ debian/*~ *.deb proxmox-spamassassin_*	updates.tmp ${SA_UPDATE_GPG_DIR}
+CLEANFILES = *~ debian/*~ *.deb proxmox-spamassassin_*	updates.tmp ${SA_UPDATE_GPG_DIR} ${OPKGNAME}.tar.gz.*
 
 .PHONY: clean
 clean: 
diff --git a/sa-releasekey.gpg b/sa-releasekey.gpg
new file mode 100644
index 0000000..bcd150c
Binary files /dev/null and b/sa-releasekey.gpg differ