diff --git a/internal/rosa/nss.go b/internal/rosa/nss.go
index b2d2a8ca..9b7c8c45 100644
--- a/internal/rosa/nss.go
+++ b/internal/rosa/nss.go
@@ -85,8 +85,8 @@ func init() {
 
 func (t Toolchain) newBuildCATrust() (pkg.Artifact, string) {
 	const (
-		version  = "0.4.0"
-		checksum = "k_FGzkRCLjbTWBkuBLzQJ1S8FPAz19neJZlMHm0t10F2Y0hElmvVwdSBRc03Rjo1"
+		version  = "0.5.1"
+		checksum = "g9AqIksz-hvCUceSR7ZKwfqf8Y_UsJU_3_zLUIdc4IkxFVkgdv9kKVvhFjE4s1-7"
 	)
 	return t.newViaPip("buildcatrust", version,
 		"https://github.com/nix-community/buildcatrust/releases/"+