diff --git a/.gitignore b/.gitignore
index 38c8360..c2edbcd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,4 @@ debian/ca-certificates-st.substvars
 debian/files
 pkg
 src
+packages
diff --git a/build_ubi.sh b/build_ubi.sh
new file mode 100755
index 0000000..965d007
--- /dev/null
+++ b/build_ubi.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+set -eu -o pipefail
+printf "%%%s %s\n" \
+    _topdir /src \
+    _rpmdir "$PWD/packages" \
+    _srcrpmdir "$PWD/packages" \
+    _builddir $(mktemp -d -p /src BUILD-XXXXXX) \
+    _rpmfilename '%%{NAME}-%%{VERSION}-%%{RELEASE}.%%{ARCH}.rpm' \
+    | tee ~/.rpmmacros
+rpmdev-setuptree
+sudo dnf builddep -y package.spec
+cp release_pkg.sh /src/SOURCES
+rpmbuild --quiet -bb package.spec
diff --git a/package.spec b/package.spec
new file mode 100644
index 0000000..3000927
--- /dev/null
+++ b/package.spec
@@ -0,0 +1,27 @@
+Name: ca-certificates-st
+Version: 1.0
+Release: 1
+Source: release_pkg.sh
+License: Propietary
+BuildArch: noarch
+Requires: ca-certificates
+BuildRequires: bao jq
+Summary: Meine Zertifikate
+
+%description
+Meine Zertifikate
+
+%prep
+%setup -T -c
+cp %SOURCE0 .
+
+%build
+./release_pkg.sh
+
+%install
+install -d %{buildroot}%{_datadir}/ca-certificates/trust-source/
+install -m 0644 certs/*.pem %{buildroot}%{_datadir}/ca-certificates/trust-source
+
+%files
+%defattr(0644, root, root , 0755)
+%{_datadir}/ca-certificates/trust-source/*