diff --git a/Cargo.lock b/Cargo.lock
index 55b9618..cb23794 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -433,7 +433,7 @@ dependencies = [
 
 [[package]]
 name = "cipher-paratime"
-version = "3.7.0-testnet"
+version = "3.7.0"
 dependencies = [
  "keymanager",
  "oasis-runtime-sdk",
diff --git a/runtime/Cargo.toml b/runtime/Cargo.toml
index 82b4741..0202eb2 100644
--- a/runtime/Cargo.toml
+++ b/runtime/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cipher-paratime"
-version = "3.7.0-testnet"
+version = "3.7.0"
 authors = ["Oasis Protocol Foundation <info@oasisprotocol.org>"]
 edition = "2021"
 license = "Apache-2.0"
@@ -18,7 +18,7 @@ threads = 26
 debug = false
 
 [dependencies]
-keymanager = { git = "https://github.com/oasisprotocol/keymanager-paratime", tag = "v0.7.0-testnet" }
+keymanager = { git = "https://github.com/oasisprotocol/keymanager-paratime", tag = "v0.7.0" }
 
 # SDK.
 oasis-runtime-sdk = { git = "https://github.com/oasisprotocol/oasis-sdk", tag = "runtime-sdk/v0.17.0" }
diff --git a/runtime/src/lib.rs b/runtime/src/lib.rs
index ead15bd..68be0d5 100644
--- a/runtime/src/lib.rs
+++ b/runtime/src/lib.rs
@@ -221,8 +221,8 @@ impl sdk::Runtime for Runtime {
         } else {
             // Mainnet.
             Some(TrustRoot {
-                height: 26000000,
-                hash: "eb1201bcf7dd7ee0bd025420dec24cf69f0ef78e690bd3d31e874a5c4f4eabe0".into(),
+                height: 28000000,
+                hash: "c54ec4bf4baf2094a5e06287b7157709da67e54b259ce378973a9a56b7e3eb76".into(),
                 runtime_id: "000000000000000000000000000000000000000000000000e199119c992377cb"
                     .into(),
                 chain_context: "bb3d748def55bdfb797a2ac53ee6ee141e54cd2ab2dc2375f4a0703a178e6e55"