diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index 41d60d7a63f..a1535774144 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -3,7 +3,7 @@ FROM quay.io/securesign/cli-cosign@sha256:329895a76a6dbdc20d2f62186fad8ddfb85be2
 FROM quay.io/securesign/gitsign@sha256:f627f17af4c30c6888eca21c414e980fcbcb5b8ab1531d8a6727a85f0045474d AS gitsign
 
 # Provides the Trusted Artifact Signer CLI binary, fetch-tsa-certs
-FROM quay.io/securesign/fetch-tsa-certs@sha256:ed75504f268e3daa83d89ef7e624cf02fa47b133ccbf298e1e0be09fc076f5bf as fetch_tsa_certs
+FROM quay.io/securesign/fetch-tsa-certs@sha256:e12dd8a595a5d9eaa360f78da3f659489b541c84769f3e7b55f7a18b7e0fbd84 as fetch_tsa_certs
 
 # Provides the Trusted Artifact Signer CLI binaries, rekor-cli and ec
 FROM quay.io/securesign/rekor-cli@sha256:f23f930067bd07aadebad190bae7a4e46cd51f87453af2bfa1178beb83c6ce62 as rekor