diff --git a/.gitignore b/.gitignore
index 86eaded..c2b447a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -100,3 +100,5 @@
 /freeipa-4.9.0rc2.tar.gz.asc
 /freeipa-4.9.0rc3.tar.gz
 /freeipa-4.9.0rc3.tar.gz.asc
+/freeipa-4.9.0.tar.gz
+/freeipa-4.9.0.tar.gz.asc
diff --git a/freeipa.spec b/freeipa.spec
index 120a174..121c772 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -165,7 +165,7 @@
 # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement
 %define IPA_VERSION 4.9.0
 # Release candidate version -- uncomment with one percent for RC versions
-%global rc_version rc3
+#%%global rc_version %%nil
 %define AT_SIGN @
 # redefine IPA_VERSION only if its value matches the Autoconf placeholder
 %if "%{IPA_VERSION}" == "%{AT_SIGN}VERSION%{AT_SIGN}"
@@ -176,7 +176,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        0.6%{?rc_version:.%rc_version}%{?dist}
+Release:        1%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPLv3+
@@ -193,8 +193,6 @@ Source1:        https://releases.pagure.org/freeipa/freeipa-%{version}%{?rc_vers
 # product-name.png
 # RHEL spec file only: END: Change branding to IPA and Identity Management
 
-Patch0001: freeipa-refactor-dnssec-paths.patch
-
 # RHEL spec file only: START
 %if 0%{?rhel} == 8 && %{NON_DEVELOPER_BUILD}
 Patch1001:      1001-Change-branding-to-IPA-and-Identity-Management.patch
@@ -1676,6 +1674,9 @@ fi
 %endif
 
 %changelog
+* Wed Dec 23 17:05:00 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-1
+- FreeIPA 4.9.0 final release
+
 * Wed Dec 16 07:52:00 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.6.rc3
 - Refactor DNSSEC paths creation code (upstream PR#5340)
 
diff --git a/sources b/sources
index 62928a2..fc550e1 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (freeipa-4.9.0rc3.tar.gz) = ded2920f0d864748bd7271212f4a30f86e45088c4591ba7ef8888ed13e5eeee4603c8958d16911b8ef1de9fe4d30ec859b700a69c84d0fef3671226caaa5a88d
-SHA512 (freeipa-4.9.0rc3.tar.gz.asc) = a0d8285a8826b56f42ebd1e78a7b318ba5daa4b6d0ee3bad26888da80720fde86dfe6cbd155db89e8ca81ed3f211ee64b45a380e3119acc7e3099c7e464125bb
+SHA512 (freeipa-4.9.0.tar.gz) = 21934147d2f5134f4dd350af801495c351fe97dfb17b5c82eb7400e773540fdb22a6dbd5f343d9a7277410bfca1265f198ea14a37c05bf69a3415352a61ab69b
+SHA512 (freeipa-4.9.0.tar.gz.asc) = c4242d0853d5eb80ae69f5506e2f31f460d2a29c74968b5fe2006abd9d7a07625a59d88b8682352d75810967746f32512df8a0a8bd9d043d97af2f35daca35be