It has to be an AAC file with the magic extension .m4r, but yep, custom ringtones are possible, have been for years.