diff --git a/.gitignore b/.gitignore
index bbd5e6b..84520d2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,4 @@
 /certbot-dns-linode-0.37.2.tar.gz
 /certbot-dns-linode-0.38.0.tar.gz
 /certbot-dns-linode-0.39.0.tar.gz
+/certbot-dns-linode-0.39.0.tar.gz.asc
diff --git a/gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg b/gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg
new file mode 100644
index 0000000..013feed
Binary files /dev/null and b/gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg differ
diff --git a/python-certbot-dns-linode.spec b/python-certbot-dns-linode.spec
index a90eba3..ddd7a2e 100644
--- a/python-certbot-dns-linode.spec
+++ b/python-certbot-dns-linode.spec
@@ -17,12 +17,19 @@
 
 Name:           python-%{pypi_name}
 Version:        0.39.0
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Linode DNS Authenticator plugin for Certbot
 
 License:        ASL 2.0
 URL:            https://github.com/certbot/certbot
-Source0:        https://files.pythonhosted.org/packages/source/c/%{pypi_name}/%{pypi_name}-%{version}.tar.gz
+Source0:        %{pypi_source}
+Source1:        %{pypi_source}.asc
+# Key mentioned in https://certbot.eff.org/docs/install.html#certbot-auto
+# Keyring generation steps as follows:
+#   gpg2 --keyserver pool.sks-keyservers.net --recv-key A2CFB51FA275A7286234E7B24D17C995CD9775F2
+#   gpg2 --export --export-options export-minimal A2CFB51FA275A7286234E7B24D17C995CD9775F2 > gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg
+Source2:        gpg-A2CFB51FA275A7286234E7B24D17C995CD9775F2.gpg
+
 BuildArch:      noarch
 
 %if %{with python2}
@@ -47,6 +54,9 @@ BuildRequires:  python3-sphinx
 BuildRequires:  python3-sphinx_rtd_theme
 %endif
 
+# Used to verify OpenPGP signature
+BuildRequires:  gnupg2
+
 %description
 Linode DNS Authenticator plugin for Certbot
 
@@ -104,6 +114,7 @@ Documentation for python-certbot-dns-linode
 %endif
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %autosetup -n %{pypi_name}-%{version}
 # Remove bundled egg-info
 rm -rf %{pypi_name}.egg-info
@@ -164,6 +175,9 @@ rm -rf html/.{doctrees,buildinfo}
 %endif
 
 %changelog
+* Wed Dec 04 2019 Eli Young <elyscape@gmail.com> - 0.39.0-2
+- Verify source OpenPGP signature
+
 * Tue Oct 01 2019 Eli Young <elyscape@gmail.com> - 0.39.0-1
 - Update to 0.39.0 (#1757582)
 
diff --git a/sources b/sources
index 48e8a7f..b9526eb 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
 SHA512 (certbot-dns-linode-0.39.0.tar.gz) = 9ca19108cb4716c957aa02f8c1c74bd6c5c59599c2531681813f6bb1c176c2b276f6db58b7068142cf412654d0d36a64d72b37fe3b1d1da6689eadc757ab47b5
+SHA512 (certbot-dns-linode-0.39.0.tar.gz.asc) = 0b2ab93f6baa40d30d4cd8b8fcb3fb7cc2e1b469f403a4fc3298061b793ab06ff48324ad7069781b7a3809ab93c39fdda689c1ab088fc343086d3fefd3564bd0