diff --git a/cmd/stackit-csi-plugin/apko-base-image.yaml b/cmd/stackit-csi-plugin/apko-base-image.yaml
index 31e7afc9..cb41bc72 100644
--- a/cmd/stackit-csi-plugin/apko-base-image.yaml
+++ b/cmd/stackit-csi-plugin/apko-base-image.yaml
@@ -5,7 +5,7 @@ contents:
   - https://packages.wolfi.dev/os
   packages:
   - busybox # required by fsck.xfs as it is a sh script
-  - ca-certificates=~20250911
+  - ca-certificates=~20251003
   - blkid=~2.41.2
   - blockdev=~2.41.2
   - e2fsprogs=~1.47.3