diff --git a/agent/download/Makefile.onl b/agent/download/Makefile.onl
index c47206d..fdf5cca 100644
--- a/agent/download/Makefile.onl
+++ b/agent/download/Makefile.onl
@@ -13,6 +13,7 @@
 # limitations under the License.
 
 COMMIT_ID = f0bcb230
+RLT_COMMIT_ID = 72b95a7
 INBAND = "n"
 BOARD = ""
 
@@ -24,7 +25,7 @@
 	fi;
 onl-4.19:
 	if [ "$(BOARD)" = "rlt-3200g-w" ] || [ "$(BOARD)" = "rlt-1600g-w" ] || [ "$(BOARD)" = "rlt-1600x-w" ]; then \
-		cd OpenNetworkLinux && git stash && git checkout -B $@ $(COMMIT_ID) && git apply disable-certificate-validation-v$(COMMIT_ID).patch && bash update_kernel_options.sh && docker/tools/onlbuilder --non-interactive -9 -c ./build-onl.sh; \
+		cd OpenNetworkLinux && git stash && git checkout -B $@ $(RLT_COMMIT_ID) && git apply disable-certificate-validation-v$(RLT_COMMIT_ID).patch && bash update_kernel_options.sh && docker/tools/onlbuilder --non-interactive -9 -c ./build-onl.sh; \
 	else \
 		cd OpenNetworkLinux && git stash && git checkout -B $@ $(COMMIT_ID) && git pull origin pull/822/head -ff -q --no-edit && git apply disable-certificate-validation-v$(COMMIT_ID).patch && docker/tools/onlbuilder --non-interactive -9 -c ./build-onl.sh; \
 	fi;
diff --git a/agent/download/disable-certificate-validation-v72b95a7.patch b/agent/download/disable-certificate-validation-v72b95a7.patch
new file mode 100644
index 0000000..f4a073e
--- /dev/null
+++ b/agent/download/disable-certificate-validation-v72b95a7.patch
@@ -0,0 +1,13 @@
+diff --git a/make/kbuild.mk b/make/kbuild.mk
+index 8be2961b..f5048c5b 100644
+--- a/make/kbuild.mk
++++ b/make/kbuild.mk
+@@ -114,7 +114,7 @@ K_DTBS_DIR := $(K_SOURCE_DIR)-dtbs
+ # The kernel source archive. Download if not present.
+ #
+ $(K_ARCHIVE_PATH):
+-	cd $(ONL_KERNELS)/archives && wget $(K_ARCHIVE_URL)
++	cd $(ONL_KERNELS)/archives && wget --no-check-certificate $(K_ARCHIVE_URL)
+ 
+ 
+ .PHONY : ksource kpatched