diff --git a/README.md b/README.md
index b9647f262..db6aee706 100644
--- a/README.md
+++ b/README.md
@@ -109,6 +109,8 @@ The following commands are available via the Smartnode client:
   - `rocketpool service resync-eth1` - Deletes the main ETH1 client's chain data and resyncs it from scratch. Only use this as a last resort!
   - `rocketpool service resync-eth2` - Deletes the ETH2 client's chain data and resyncs it from scratch. Only use this as a last resort!
   - `rocketpool service terminate, t` - Deletes all of the Rocket Pool Docker containers and volumes, including your ETH1 and ETH2 chain data and your Prometheus database (if metrics are enabled). Only use this if you are cleaning up the Smartnode and want to start over!
+- **update**, u - Update Rocket Pool
+  - `rocketpool update cli, c` - Update the Rocket Pool Client (CLI)
 - **wallet**, w - Manage the node wallet
   - `rocketpool wallet status, s` - Get the node wallet status
   - `rocketpool wallet init, i` - Initialize the node wallet
diff --git a/rocketpool-cli/rocketpool-cli.go b/rocketpool-cli/rocketpool-cli.go
index 48a387586..4db604a51 100644
--- a/rocketpool-cli/rocketpool-cli.go
+++ b/rocketpool-cli/rocketpool-cli.go
@@ -15,6 +15,7 @@ import (
 	"github.com/rocket-pool/smartnode/rocketpool-cli/odao"
 	"github.com/rocket-pool/smartnode/rocketpool-cli/queue"
 	"github.com/rocket-pool/smartnode/rocketpool-cli/service"
+	"github.com/rocket-pool/smartnode/rocketpool-cli/update"
 	"github.com/rocket-pool/smartnode/rocketpool-cli/wallet"
 	"github.com/rocket-pool/smartnode/shared"
 	"github.com/rocket-pool/smartnode/shared/services/rocketpool"
@@ -148,6 +149,7 @@ ______           _        _    ______           _
 	odao.RegisterCommands(app, "odao", []string{"o"})
 	queue.RegisterCommands(app, "queue", []string{"q"})
 	service.RegisterCommands(app, "service", []string{"s"})
+	update.RegisterCommands(app, "update", []string{"u"})
 	wallet.RegisterCommands(app, "wallet", []string{"w"})
 
 	app.Before = func(c *cli.Context) error {
diff --git a/rocketpool-cli/update/update.go b/rocketpool-cli/update/update.go
new file mode 100644
index 000000000..78b9192b1
--- /dev/null
+++ b/rocketpool-cli/update/update.go
@@ -0,0 +1,242 @@
+package update
+
+import (
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+	"path/filepath"
+	"runtime"
+	"strings"
+	"time"
+
+	"github.com/blang/semver/v4"
+	"github.com/urfave/cli"
+	"golang.org/x/crypto/openpgp"
+
+	"github.com/rocket-pool/smartnode/shared"
+	cliutils "github.com/rocket-pool/smartnode/shared/utils/cli"
+)
+
+// Settings
+const (
+	GithubAPIGetLatest string = "https://api.github.com/repos/rocket-pool/smartnode-install/releases/latest"
+	SigningKeyURL      string = "https://github.com/rocket-pool/smartnode-install/releases/download/v%s/smartnode-signing-key-v3.asc"
+	ReleaseBinaryURL   string = "https://github.com/rocket-pool/smartnode-install/releases/download/v%s/rocketpool-cli-%s-%s"
+)
+
+func checkSignature(signatureUrl string, pubkeyUrl string, verification_target *os.File) error {
+	pubkeyResponse, err := http.Get(pubkeyUrl)
+	if err != nil {
+		return fmt.Errorf("error while fetching public key: %w", err)
+	}
+	defer pubkeyResponse.Body.Close()
+	if pubkeyResponse.StatusCode != http.StatusOK {
+		return fmt.Errorf("public key request failed with code %d", pubkeyResponse.StatusCode)
+	}
+	keyring, err := openpgp.ReadArmoredKeyRing(pubkeyResponse.Body)
+	if err != nil {
+		return fmt.Errorf("error while reading public key: %w", err)
+	}
+
+	signatureResponse, err := http.Get(signatureUrl)
+	if err != nil {
+		return fmt.Errorf("error while fetching signature: %w", err)
+	}
+	defer signatureResponse.Body.Close()
+	if signatureResponse.StatusCode != http.StatusOK {
+		return fmt.Errorf("signature request failed with code %d", signatureResponse.StatusCode)
+	}
+
+	entity, err := openpgp.CheckDetachedSignature(keyring, verification_target, signatureResponse.Body)
+	if err != nil {
+		return fmt.Errorf("error while verifying signature: %w", err)
+	}
+
+	for _, v := range entity.Identities {
+		fmt.Printf("Signature verified. Signed by: %s\n", v.Name)
+	}
+	return nil
+}
+
+func getHttpClientWithTimeout() *http.Client {
+	return &http.Client{
+		Timeout: time.Second * 5,
+	}
+}
+
+func getLatestRelease() (semver.Version, error) {
+	var latestVersion semver.Version
+	client := getHttpClientWithTimeout()
+	resp, err := client.Get(GithubAPIGetLatest)
+	if err != nil {
+		return latestVersion, fmt.Errorf("error while fetching latest version: %w", err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		return latestVersion, fmt.Errorf("request failed with code %d", resp.StatusCode)
+	}
+	body, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return latestVersion, fmt.Errorf("error while reading Github API response: %w", err)
+	}
+	var apiResponse map[string]interface{}
+	if err := json.Unmarshal(body, &apiResponse); err != nil {
+		return latestVersion, fmt.Errorf("could not decode Github API response: %w", err)
+	}
+	if x, found := apiResponse["name"]; found {
+		var name string
+		var ok bool
+		if name, ok = x.(string); !ok {
+			return latestVersion, fmt.Errorf("unexpected Github API response format")
+		}
+		latestVersion, err = semver.Make(strings.TrimLeft(name, "v"))
+		if err != nil {
+			return latestVersion, fmt.Errorf("could not parse version number from release name '%s': %w", name, err)
+		}
+	} else {
+		return latestVersion, fmt.Errorf("unexpected Github API response format")
+	}
+	return latestVersion, nil
+}
+
+func downloadRelease(version semver.Version, verify bool) (string, string, error) {
+	var ClientURL = fmt.Sprintf(ReleaseBinaryURL, version.String(), runtime.GOOS, runtime.GOARCH)
+	resp, err := http.Get(ClientURL)
+	if err != nil {
+		return "", "", fmt.Errorf("error while downloading %s: %w", ClientURL, err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		return "", "", fmt.Errorf("request failed with code %d", resp.StatusCode)
+	}
+
+	ex, err := os.Executable()
+	if err != nil {
+		return "", "", fmt.Errorf("error while determining running rocketpool location: %w", err)
+	}
+	var rpBinDir = filepath.Dir(ex)
+	var fileName = filepath.Join(rpBinDir, "rocketpool-v"+version.String())
+	output, err := os.OpenFile(fileName, os.O_RDWR|os.O_CREATE|os.O_TRUNC, 0755)
+	if err != nil {
+		return "", "", fmt.Errorf("error while creating %s: %w", fileName, err)
+	}
+	defer output.Close()
+
+	_, err = io.Copy(output, resp.Body)
+	if err != nil {
+		return "", "", fmt.Errorf("error while downloading %s: %w", ClientURL, err)
+	}
+
+	// Verify the signature of the downloaded binary
+	if verify {
+		var pubkeyUrl = fmt.Sprintf(SigningKeyURL, version.String())
+		_, err = output.Seek(0, io.SeekStart)
+		if err != nil {
+			return "", "", fmt.Errorf("error while seeking in %s: %w", fileName, err)
+		}
+		err = checkSignature(ClientURL+".sig", pubkeyUrl, output)
+		if err != nil {
+			return "", "", fmt.Errorf("error while verifying GPG signature: %w", err)
+		}
+	}
+	return fileName, ex, nil
+}
+
+// Update the Rocket Pool CLI
+func updateCLI(c *cli.Context) error {
+
+	// Check the latest version published to the Github repository
+	latestVersion, err := getLatestRelease()
+	if err != nil {
+		return fmt.Errorf("could not check latest version: %w", err)
+	}
+
+	// Check this version against the currently installed version
+	if !c.Bool("force") {
+		currentVersion, err := semver.Make(shared.RocketPoolVersion)
+		if err != nil {
+			return fmt.Errorf("could not parse local Rocket Pool version number '%s': %w", shared.RocketPoolVersion, err)
+		}
+		switch latestVersion.Compare(currentVersion) {
+		case 1:
+			fmt.Printf("Newer version avilable online (v%s). Downloading...\n", latestVersion.String())
+		case 0:
+			fmt.Printf("Already on latest version (v%s). Aborting update\n", latestVersion.String())
+			return nil
+		default:
+			fmt.Printf("Online version (v%s) is lower than running version (v%s). Aborting update\n", latestVersion.String(), currentVersion.String())
+			return nil
+		}
+	} else {
+		fmt.Printf("Forced update to v%s. Downloading...\n", latestVersion.String())
+	}
+
+	// Download the new binary to same folder as the running RP binary and check signature (unless skipped)
+	newFile, oldFile, err := downloadRelease(latestVersion, !c.Bool("skip-signature-verification"))
+	if err != nil {
+		return fmt.Errorf("error while downloading latest release: %w", err)
+	}
+
+	// Prompt for confirmation
+	if !(c.Bool("yes") || cliutils.Confirm("Are you sure you want to update? Current Rocketpool Client will be replaced.")) {
+		fmt.Println("Cancelled.")
+		err = os.Remove(newFile)
+		if err != nil {
+			return fmt.Errorf("error while cleaning up downloaded file: %w", err)
+		}
+		return nil
+	}
+
+	// Do the switcheroo - move `rocketpool-vX.X.X` to the location of the current Rocketpool Client
+	err = os.Rename(newFile, oldFile)
+	if err != nil {
+		return fmt.Errorf("error while writing new rocketpool binary: %w", err)
+	}
+
+	fmt.Printf("Updated Rocketpool Client to v%s. Please run `rocketpool service install` to finish the installation and update your smartstack.\n", latestVersion.String())
+	return nil
+}
+
+// Register commands
+func RegisterCommands(app *cli.App, name string, aliases []string) {
+
+	app.Commands = append(app.Commands, cli.Command{
+		Name:    name,
+		Aliases: aliases,
+		Subcommands: []cli.Command{
+			{
+				Name:      "cli",
+				Aliases:   []string{"c"},
+				Usage:     "Update the Rocket Pool CLI",
+				UsageText: "rocketpool update cli [options]",
+				Flags: []cli.Flag{
+					cli.BoolFlag{
+						Name:  "force, f",
+						Usage: "Force update, even if same version or lower",
+					},
+					cli.BoolFlag{
+						Name:  "skip-signature-verification, s",
+						Usage: "Skip signature verification",
+					},
+					cli.BoolFlag{
+						Name:  "yes, y",
+						Usage: "Automatically confirm update",
+					},
+				},
+				Action: func(c *cli.Context) error {
+
+					// Validate args
+					if err := cliutils.ValidateArgCount(c, 0); err != nil {
+						return err
+					}
+
+					// Run command
+					return updateCLI(c)
+
+				},
+			},
+		},
+	})
+}