diff --git a/Makefile b/Makefile
index 50f3124ca..4f8281973 100644
--- a/Makefile
+++ b/Makefile
@@ -23,6 +23,10 @@ install:
 	@echo /usr/local/etc/pkg/repos/OPNsense.conf
 	@cp ${.CURDIR}/pkg/pkg.conf ${DESTDIR}/usr/local/etc
 	@echo /usr/local/etc/pkg.conf
+	@mkdir -p ${DESTDIR}/usr/local/etc/pkg/fingerprints/OPNsense/trusted
+	@cp ${.CURDIR}/pkg/trusted/pkg.opnsense.org.20150402 \
+	    ${DESTDIR}/usr/local/etc/pkg/fingerprints/OPNsense/trusted
+	@echo /usr/local/etc/pkg/fingerprints/OPNsense/trusted/pkg.opnsense.org.20150402
 	# finally pretty-print a list of files present
 	@(cd ${.CURDIR}/src; find * -type f) | \
 	    xargs -n1 printf "/usr/local/%s\n"
diff --git a/pkg/OPNsense.conf b/pkg/OPNsense.conf
index 7404bbeb5..47556116c 100644
--- a/pkg/OPNsense.conf
+++ b/pkg/OPNsense.conf
@@ -1,5 +1,6 @@
 OPNsense: {
   url: "pkg+http://pkg.opnsense.org/${ABI}/latest",
+  signature_type: "fingerprints",
   mirror_type: "srv",
   priority: 11,
   enabled: yes
diff --git a/pkg/trusted/pkg.opnsense.org.20150402 b/pkg/trusted/pkg.opnsense.org.20150402
new file mode 100644
index 000000000..f3218e29c
--- /dev/null
+++ b/pkg/trusted/pkg.opnsense.org.20150402
@@ -0,0 +1,2 @@
+function: "sha256"
+fingerprint: "598b5faf596474e7fe97280b0527edaefd978f16ba941799126030dc55c1f8b8"