diff --git a/spack-environment/packages.yaml b/spack-environment/packages.yaml
index 49ecec4d539866a2fcc2a857227a9e06904d8ca7..e093ebfad47bdc562b874999f669b9aa4e22dfd6 100644
--- a/spack-environment/packages.yaml
+++ b/spack-environment/packages.yaml
@@ -215,7 +215,7 @@ packages:
       prefix: /usr
   osg-ca-certs:
     require:
-    - '@1.110.igtf.1.119'
+    - '@1.119.igtf.1.128'
   pcre:
     require:
     - build_system=cmake
diff --git a/spack.sh b/spack.sh
index d7e2e168e584edecd5b324455e1afebdd8b7d652..60d2028b162695139a4a320c9376b891e0c3558b 100644
--- a/spack.sh
+++ b/spack.sh
@@ -62,6 +62,7 @@ e8ae9a403ca7db7738d36bf41bf99977b9c88a84
 28d02dff6090b72e070c5b9497cd1f4372b4723f
 6008ae0c607560e4320dad5dcb35aaa4e1bc5d50
 62132919e1465a40e3522e40278e4bbc8ec32978
+946c539dbd95cd78ababda66e58a1c3f8953c95a
 ---
 ## Optional hash table with comma-separated file list
 read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
@@ -127,3 +128,4 @@ read -r -d '' SPACK_CHERRYPICKS_FILES <<- \
 ## 28d02dff6090b72e070c5b9497cd1f4372b4723f: pythia8: new version 8.311
 ## 6008ae0c607560e4320dad5dcb35aaa4e1bc5d50: geant4-data: fix versions for 11.2
 ## 62132919e1465a40e3522e40278e4bbc8ec32978: xrootd: new version 5.6.9
+## 946c539dbd95cd78ababda66e58a1c3f8953c95a: osg-ca-certs: new version osg-1.119 igtf-1.128