diff --git a/build.xml b/build.xml
index 8da1baab..5b618d99 100644
--- a/build.xml
+++ b/build.xml
@@ -388,7 +388,7 @@
     </artifact:deploy>
   </target>
 
-  <target name="test" depends="-check-myself,-antunit,-tests-unsupported" description="Run tests"/>
+  <target name="test" depends="-check-myself,check-bundled-signatures,-antunit,-tests-unsupported" description="Run tests"/>
 
   <target name="-install-forbiddenapi-task" depends="compile" unless="installed.forbiddenapi-task">
     <taskdef name="forbiddenapis" classname="de.thetaphi.forbiddenapis.AntTask" classpathref="path.run"/>
@@ -411,6 +411,15 @@
     </forbiddenapis>
   </target>
 
+  <target name="check-bundled-signatures" depends="-install-forbiddenapi-task" if="tests.supported"
+    description="Checks bundled signatures file corresponding to the current JVM. Run after every update!">
+    <forbiddenapis failOnUnsupportedJava="true" classpathref="path.tools-run" ignoreEmptyFileset="true">
+      <bundledsignatures name="jdk-unsafe-${build.java.runtime}"/>
+      <bundledsignatures name="jdk-deprecated-${build.java.runtime}"/>
+      <bundledsignatures name="jdk-system-out"/>
+    </forbiddenapis>
+  </target>
+
   <target name="-install-antunit" unless="installed.antunit">
     <taskdef uri="antlib:org.apache.ant.antunit" classpathref="path.test"/>
     <taskdef uri="antlib:net.sf.antcontrib" classpathref="path.test"/>