diff --git a/.gitignore b/.gitignore
index b2173c7..8af5902 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,4 @@
 /robosignatory-0.3.5.tar.gz
 /robosignatory-0.3.6.tar.gz
 /robosignatory-0.4.0.tar.gz
+/robosignatory-0.4.1.tar.gz
diff --git a/python-robosignatory.spec b/python-robosignatory.spec
index db0d200..9b57b3e 100644
--- a/python-robosignatory.spec
+++ b/python-robosignatory.spec
@@ -7,8 +7,8 @@
 %global modname robosignatory
 
 Name:               python-robosignatory
-Version:            0.4.0
-Release:            2%{?dist}
+Version:            0.4.1
+Release:            1%{?dist}
 Summary:            A fedmsg consumer that automatically signs artifacts
 
 License:            GPLv2+
@@ -70,6 +70,9 @@ rm -rf %{modname}.egg-info
 
 
 %changelog
+* Fri Sep 15 2017 Patrick Uiterwijk <patrick@puiterwijk.org> - 0.4.1-1
+- Rebased to upstream 0.4.1
+
 * Sat Aug 19 2017 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.0-2
 - Python 2 binary package renamed to python2-robosignatory
   See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
diff --git a/sources b/sources
index 1b8e7da..4be7468 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (robosignatory-0.4.0.tar.gz) = b9be6e3ff646d1edcbe225fc5e4a4d4c73fc4ce1c82c5ec064c942e953ef66df3b06cb63da4eaf1b499a2d4551cf8b35db5fa26e5b4ee0ddf1574c8f6947a17e
+SHA512 (robosignatory-0.4.1.tar.gz) = ce1009845c7ce3927b4d722249e5b4d135052c78365a37ba9e81f2031f641a3f57303bc2c29d81763f4a7050dbaf6a051da1c9c5bbf1c9075435400858106b7d