diff --git a/.gitignore b/.gitignore
index a6c0618..d4d43ff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,6 @@
 /p11-kit-client.service
 /trust-extract-compat
 /p11-kit-0.23.15.tar.gz
+/p11-kit-client.service
+/trust-extract-compat
+/p11-kit-0.23.16.tar.gz
diff --git a/p11-kit.spec b/p11-kit.spec
index 0c820ea..279fdf6 100644
--- a/p11-kit.spec
+++ b/p11-kit.spec
@@ -1,6 +1,6 @@
 # This spec file has been automatically updated
-Version:	0.23.15
-Release: 3%{?dist}
+Version:	0.23.16
+Release: 1%{?dist}
 Name:           p11-kit
 Summary:        Library for loading and sharing PKCS#11 modules
 
@@ -141,6 +141,9 @@ fi
 
 
 %changelog
+* Thu May 23 2019 Daiki Ueno <dueno@redhat.com> - 0.23.16-1
+- Update to upstream 0.23.16 release
+
 * Mon Feb 18 2019 Daiki Ueno <dueno@redhat.com> - 0.23.15-3
 - trust: Ignore unreadable content in anchors
 
diff --git a/sources b/sources
index cb7930a..ce88d15 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (p11-kit-client.service) = 0f08618851c6eafb35c630957044fc96324be4d3828cdd2aa9b5d6e1245549197ca5b969d6a2f735c893d73c02e885cdc3205bd43e37f6124ebc6cfa61970d3b
 SHA512 (trust-extract-compat) = 91210705f9bcf1a13c0de1ca9943e3ac68296bfcb7953fc59241de060247b470b39be6e914dd4d92e38a78d5df0962c83315ad78f8c0eade8e62d884b05fdd42
-SHA512 (p11-kit-0.23.15.tar.gz) = d703eec12626b79551ce337521f7ea7b1a0b64c211d7a93d831dd28ec1de77c7b58358c1588bf82d70f047c01ad9433fa8a286d1a25ae3f6b0ee6016b8c42950
+SHA512 (p11-kit-0.23.16.tar.gz) = 36af13a18633698149c3b19458dce74d4441e184772229779335859a87af3997a59c2c590d8150dec52a3c58fe185c2281c589892b8fb87276f11fbc2c017d61