diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh
index a05f11850..eb52d3cc9 100644
--- a/Dockerfile.cli-stack.rh
+++ b/Dockerfile.cli-stack.rh
@@ -11,10 +11,10 @@ RUN git config --global --add safe.directory /opt/app-root/src && \
     go mod download && \
     make -f Build.mak cross-platform
 
-FROM --platform=linux/amd64   quay.io/securesign/fetch-tsa-certs@sha256:f519080904b3a7652c421539e292e46bf026ce0e401945b30b942833ff38468d AS build-amd64
-FROM --platform=linux/arm64   quay.io/securesign/fetch-tsa-certs@sha256:f519080904b3a7652c421539e292e46bf026ce0e401945b30b942833ff38468d AS build-arm64
-FROM --platform=linux/ppc64le quay.io/securesign/fetch-tsa-certs@sha256:f519080904b3a7652c421539e292e46bf026ce0e401945b30b942833ff38468d AS build-ppc64le
-FROM --platform=linux/s390x   quay.io/securesign/fetch-tsa-certs@sha256:f519080904b3a7652c421539e292e46bf026ce0e401945b30b942833ff38468d AS build-s390x
+FROM --platform=linux/amd64   quay.io/securesign/fetch-tsa-certs@sha256:0ede145be348642b340c3828dd7e9332da44fcdd3078c51ed97ba4d6b3ff417a AS build-amd64
+FROM --platform=linux/arm64   quay.io/securesign/fetch-tsa-certs@sha256:0ede145be348642b340c3828dd7e9332da44fcdd3078c51ed97ba4d6b3ff417a AS build-arm64
+FROM --platform=linux/ppc64le quay.io/securesign/fetch-tsa-certs@sha256:0ede145be348642b340c3828dd7e9332da44fcdd3078c51ed97ba4d6b3ff417a AS build-ppc64le
+FROM --platform=linux/s390x   quay.io/securesign/fetch-tsa-certs@sha256:0ede145be348642b340c3828dd7e9332da44fcdd3078c51ed97ba4d6b3ff417a AS build-s390x
 
 FROM registry.redhat.io/ubi9/go-toolset:9.8-1779959429@sha256:a2ba4645e7c424b08aa83ed7792e279683b0d33acbc5131b18183fd21e336c55 AS packager
 USER root