diff --git a/net/rpki-client/Makefile b/net/rpki-client/Makefile
index c3cc46b8d76d..139abe1cd2c6 100644
--- a/net/rpki-client/Makefile
+++ b/net/rpki-client/Makefile
@@ -1,38 +1,39 @@
 PORTNAME=	rpki-client
-DISTVERSION=	7.1
+DISTVERSION=	7.2
 CATEGORIES=	net
 
 MAINTAINER=	zeising@FreeBSD.org
 COMMENT=	Resource Public Key Infrastructure (RPKI) implementation from OpenBSD
 
 LICENSE=	ISCL
 
 BUILD_DEPENDS=	rsync>0:net/rsync
 LIB_DEPENDS=	libexpat.so:textproc/expat2 \
 		libtls.so:security/libretls
-RUN_DEPENDS=	rsync>0:net/rsync
+RUN_DEPENDS=	ca_root_nss>=0:security/ca_root_nss \
+		rsync>0:net/rsync
 
 USES=		autoreconf libtool pkgconfig ssl
 
 USE_GITHUB=	yes
 GH_PROJECT=	${PORTNAME}-portable ${PORTNAME}-openbsd:openbsd
 GH_SUBDIR=	openbsd:openbsd
 GH_TAGNAME=	${PORTNAME}-${DISTVERSION}:openbsd
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS=	--with-libtls=libtls
 
 USERS=		_rpki-client
 GROUPS=		${USERS}
 PLIST_SUB=	USERS="${USERS}"
 
 .include <bsd.port.pre.mk>
 
 .if ${OSREL:R} < 12 && ${SSL_DEFAULT} == "base"
 BROKEN=		requires OpenSSL 1.1.1, upgrade to FreeBSD 12.x/13.x or add DEFAULT_VERSIONS+=ssl=[openssl|libressl*] to /etc/make.conf
 .endif
 
 pre-configure:
 	cd ${WRKSRC} && ${SH} update.sh
 
 .include <bsd.port.post.mk>
diff --git a/net/rpki-client/distinfo b/net/rpki-client/distinfo
index 4c966c76a0cf..2577d81749b0 100644
--- a/net/rpki-client/distinfo
+++ b/net/rpki-client/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1625590584
-SHA256 (rpki-client-rpki-client-portable-7.1_GH0.tar.gz) = bcf24a19d9c8aaebaa74e17ac085cdf61f0b3295c021859c43ec8d0477218a32
-SIZE (rpki-client-rpki-client-portable-7.1_GH0.tar.gz) = 51679
-SHA256 (rpki-client-rpki-client-openbsd-rpki-client-7.1_GH0.tar.gz) = 501178a99922004cedebb5baae9dc3c5c45b1383c803d9ef39530b71f2940906
-SIZE (rpki-client-rpki-client-openbsd-rpki-client-7.1_GH0.tar.gz) = 629137
+TIMESTAMP = 1628259110
+SHA256 (rpki-client-rpki-client-portable-7.2_GH0.tar.gz) = 8e8ad9878a0b84b862d71f005c6fd9eca8285bf941d208bd01b9c5bc77891c45
+SIZE (rpki-client-rpki-client-portable-7.2_GH0.tar.gz) = 51833
+SHA256 (rpki-client-rpki-client-openbsd-rpki-client-7.2_GH0.tar.gz) = 8fb80ddf65fd4ced11391a6bfa4b1f42d27183671c5b1f9058b39d16ef81f6c5
+SIZE (rpki-client-rpki-client-openbsd-rpki-client-7.2_GH0.tar.gz) = 629212