diff --git a/net/rpki-client/Makefile b/net/rpki-client/Makefile
--- a/net/rpki-client/Makefile
+++ b/net/rpki-client/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	rpki-client
-DISTVERSION=	7.1
+DISTVERSION=	7.2
 CATEGORIES=	net
 
 MAINTAINER=	zeising@FreeBSD.org
@@ -10,7 +10,8 @@
 BUILD_DEPENDS=	rsync>0:net/rsync
 LIB_DEPENDS=	libexpat.so:textproc/expat2 \
 		libtls.so:security/libretls
-RUN_DEPENDS=	rsync>0:net/rsync
+RUN_DEPENDS=	ca_root_nss>=0:security/ca_root_nss \
+		rsync>0:net/rsync
 
 USES=		autoreconf libtool pkgconfig ssl
 
diff --git a/net/rpki-client/distinfo b/net/rpki-client/distinfo
--- a/net/rpki-client/distinfo
+++ b/net/rpki-client/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1625590584
-SHA256 (rpki-client-rpki-client-portable-7.1_GH0.tar.gz) = bcf24a19d9c8aaebaa74e17ac085cdf61f0b3295c021859c43ec8d0477218a32
-SIZE (rpki-client-rpki-client-portable-7.1_GH0.tar.gz) = 51679
-SHA256 (rpki-client-rpki-client-openbsd-rpki-client-7.1_GH0.tar.gz) = 501178a99922004cedebb5baae9dc3c5c45b1383c803d9ef39530b71f2940906
-SIZE (rpki-client-rpki-client-openbsd-rpki-client-7.1_GH0.tar.gz) = 629137
+TIMESTAMP = 1628259110
+SHA256 (rpki-client-rpki-client-portable-7.2_GH0.tar.gz) = 8e8ad9878a0b84b862d71f005c6fd9eca8285bf941d208bd01b9c5bc77891c45
+SIZE (rpki-client-rpki-client-portable-7.2_GH0.tar.gz) = 51833
+SHA256 (rpki-client-rpki-client-openbsd-rpki-client-7.2_GH0.tar.gz) = 8fb80ddf65fd4ced11391a6bfa4b1f42d27183671c5b1f9058b39d16ef81f6c5
+SIZE (rpki-client-rpki-client-openbsd-rpki-client-7.2_GH0.tar.gz) = 629212