diff --git a/Dockerfile.jdk-rhel b/Dockerfile.jdk-rhel
index 7b264d2..95809d8 100644
--- a/Dockerfile.jdk-rhel
+++ b/Dockerfile.jdk-rhel
@@ -3,6 +3,8 @@ ARG BASE_TAG="jdk25-ubi10"
 
 FROM ${BASE_REPO}gradle:${BASE_TAG}
 
+COPY rhel/ubi.repo /etc/yum.repos.d/
+
 COPY ca/nstart.local.crt /certificates/
 ENV USE_SYSTEM_CA_CERTS=1
 
diff --git a/Dockerfile.jre-rhel b/Dockerfile.jre-rhel
index 50bdbdb..aebcb91 100644
--- a/Dockerfile.jre-rhel
+++ b/Dockerfile.jre-rhel
@@ -3,6 +3,7 @@ ARG BASE_TAG="25-jre-ubi10-minimal"
 
 FROM ${BASE_REPO}eclipse-temurin:${BASE_TAG}
 
+COPY rhel/ubi.repo /etc/yum.repos.d/
 
 COPY ca/nstart.local.crt /certificates/
 ENV USE_SYSTEM_CA_CERTS=1
diff --git a/rhel/ubi.repo b/rhel/ubi.repo
index fd6ca1e..d3d8398 100644
--- a/rhel/ubi.repo
+++ b/rhel/ubi.repo
@@ -1,62 +1,71 @@
 [ubi-10-baseos-rpms]
 name = Red Hat Universal Base Image 10 (RPMs) - BaseOS
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/baseos/os
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/baseos/os
 enabled = 1
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-baseos-debug-rpms]
 name = Red Hat Universal Base Image 10 (Debug RPMs) - BaseOS
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/baseos/debug
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/baseos/debug
 enabled = 0
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-baseos-source-rpms]
 name = Red Hat Universal Base Image 10 (Source RPMs) - BaseOS
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/baseos/source/SRPMS
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/baseos/source/SRPMS
 enabled = 0
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-appstream-rpms]
 name = Red Hat Universal Base Image 10 (RPMs) - AppStream
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/appstream/os
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/appstream/os
 enabled = 1
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-appstream-debug-rpms]
 name = Red Hat Universal Base Image 10 (Debug RPMs) - AppStream
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/appstream/debug
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/appstream/debug
 enabled = 0
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-appstream-source-rpms]
 name = Red Hat Universal Base Image 10 (Source RPMs) - AppStream
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/appstream/source/SRPMS
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/appstream/source/SRPMS
 enabled = 0
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-codeready-builder-rpms]
 name = Red Hat Universal Base Image 10 (RPMs) - CodeReady Builder
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/codeready-builder/os
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/codeready-builder/os
 enabled = 1
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-codeready-builder-debug-rpms]
 name = Red Hat Universal Base Image 10 (Debug RPMs) - CodeReady Builder
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/codeready-builder/debug
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/codeready-builder/debug
 enabled = 0
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt
 
 [ubi-10-codeready-builder-source-rpms]
 name = Red Hat Universal Base Image 10 (Source RPMs) - CodeReady Builder
-baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi10/10/$basearch/codeready-builder/source/SRPMS
+baseurl = https://repo.nstart.local/repository/ubi-redhat//content/public/ubi/dist/ubi10/10/$basearch/codeready-builder/source/SRPMS
 enabled = 0
 gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 gpgcheck = 1
+sslcacert=/certificates/nstart.local.crt