diff --git a/net-misc/rpki-client/Manifest b/net-misc/rpki-client/Manifest
index ce89ea2..02fa47b 100644
--- a/net-misc/rpki-client/Manifest
+++ b/net-misc/rpki-client/Manifest
@@ -1,5 +1,6 @@
-DIST rpki-client-6.8p1.tar.gz 390248 BLAKE2B f7d553cd1291ea803bf17da31a57ca940cfec4915cff1d504b3665b4c84e809bc2a20e5241d76589594426420903548fde4f1967526ae1e047661a03b948dd94 SHA512 41f6374e600b9411c70e6b5748ad4f06d779a47c25005111a72c28b2eeb941ea7ceaaced19c7f2917f62e4f595a951c7bfcbbc85288610501306a26454deb872
 DIST rpki-client-7.3-cert.pem 335615 BLAKE2B 9848b986b8b3fe1cbea880fa3161d9292aaf3ec5e2d6668b422ec840c5055a4fed1d3f4c78bff07b7fc75fe6642de95c3ccb3c2e8ab2f34ef37c27883c7578db SHA512 80f59079cfe66734543d19347734ae82d18219184cf264cef620a867cf171258272ca4504afad65600800e5a8025fd5b686220a03fffedd402f715fca405fc41
 DIST rpki-client-7.3.tar.gz 436709 BLAKE2B 2deae5f2d14b16b6d3eafb667c38bd7c32ec9aa931a8e85e8aea20fffeff37e17d4ab9583f3475ce07792411806deec6d8167b116d8a95cb9db8861bed9bbe19 SHA512 ea8b3fbaebb447e683e3fdc5b648d324084a99baa1887fbb603646ade8a658dc3f4b1efa8f5436a894f39095f696495fa0db59b8407a9b6a51c9aa4e1664e1b1
 DIST rpki-client-7.5-cert.pem 335615 BLAKE2B 9848b986b8b3fe1cbea880fa3161d9292aaf3ec5e2d6668b422ec840c5055a4fed1d3f4c78bff07b7fc75fe6642de95c3ccb3c2e8ab2f34ef37c27883c7578db SHA512 80f59079cfe66734543d19347734ae82d18219184cf264cef620a867cf171258272ca4504afad65600800e5a8025fd5b686220a03fffedd402f715fca405fc41
 DIST rpki-client-7.5.tar.gz 440318 BLAKE2B 63876c7f3415312ac7bd1ad5726818e81aa1059c7af2785f0f27b427a69bd524ffffbaeb30e204526bc4f6cfe7f86b401d9229f9b97647a6ee32b55d420bc15f SHA512 3ec9cde07f9e82c5e460fb08f846634008942e9178904482bc5eaab754e405fee13c6fe8fb17661d358775ec641166675695fc02ec855aa19a564e4cd902a2bc
+DIST rpki-client-8.0-cert.pem 315784 BLAKE2B 52c61b36cccdeaf62874be17df2e80302fb71e3f806715e00eb9c3da49b35d562ccc27aa6fe6ee92fea5017898b86046f0f68123b8d54362d4b651e5d0c2ff4b SHA512 8e1dc1f9d079028c81ffd3755505645e6095a45042fe7fb26179b5fedcc580a5f12a111470fda1ece96643cb1845d730f0313fbdd8cb312a2f3fdfcb2f2c0963
+DIST rpki-client-8.0.tar.gz 465620 BLAKE2B d1babea261c058ba4ee259eb6a231204c8b00c82eac8897cc941fb2a815c655af98ac2ebf616a75c1355a9adfeb5920a0d7b1270b217077c991a83b873ded8d6 SHA512 f56fb7f6b20bac2f664608b7c4014be51090754c799c6b80d5fe641640d145d4acd9702e010f455c4e38be454fa3862b0881bf956c2ee6db24417f8c3d1b56f9
diff --git a/net-misc/rpki-client/rpki-client-6.8_p1.ebuild b/net-misc/rpki-client/rpki-client-8.0.ebuild
similarity index 78%
rename from net-misc/rpki-client/rpki-client-6.8_p1.ebuild
rename to net-misc/rpki-client/rpki-client-8.0.ebuild
index bd55f36..ab0e569 100644
--- a/net-misc/rpki-client/rpki-client-6.8_p1.ebuild
+++ b/net-misc/rpki-client/rpki-client-8.0.ebuild
@@ -8,7 +8,8 @@ MY_P="${PN}-${MY_PV}"
 
 DESCRIPTION="Portability shim for OpenBSD's rpki-client"
 HOMEPAGE="https://rpki-client.org/"
-SRC_URI="mirror://openbsd/${PN}/${PN}-${MY_PV}.tar.gz"
+SRC_URI="mirror://openbsd/${PN}/${PN}-${MY_PV}.tar.gz
+https://lg.breizh-ix.net/ssl/cert.pem -> ${PN}-${MY_PV}-cert.pem"
 
 LICENSE="ISC"
 SLOT="0"
@@ -18,6 +19,7 @@ IUSE=""
 DEPEND="
 	acct-group/_rpki-client
 	acct-user/_rpki-client
+	dev-libs/libretls
 "
 RDEPEND="${DEPEND}"
 BDEPEND="
@@ -36,8 +38,12 @@ src_configure() {
 
 src_install() {
 	emake DESTDIR="${D}" BINDIR="/usr/bin" MANDIR="/usr/share/man" install
+
 	insinto /etc/rpki
 	doins *.tal
 	keepdir "/var/db/${PN}/"
 	fowners -R _rpki-client "/var/db/${PN}/"
+
+	insinto /etc/ssl
+	newins "${DISTDIR}/${PN}-${MY_PV}-cert.pem" cert.pem
 }