diff --git a/net-misc/rpki-client/Manifest b/net-misc/rpki-client/Manifest
index 30dd5ca..8995a8f 100644
--- a/net-misc/rpki-client/Manifest
+++ b/net-misc/rpki-client/Manifest
@@ -1,3 +1,4 @@
 DIST rpki-client-6.7_p1.tar.gz 44463 BLAKE2B c269a502c680a4c41c2201fceed2f3bab7b83e3a6a173fea5081ced073e10f02fd7aaa07ef4b9d14f816c88871ffee8c65126f0efcda9e8ca7c08032cac179d6 SHA512 bc9815ab6cd930715e9494b82b1547a419706db3fa4eca003767d6e39c3a63c0a3f3048c211c773e1f0e87043b0bfd622b0d5be856ccced27f893eefc9511211
 DIST rpki-client-6.8p1.tar.gz 390248 BLAKE2B f7d553cd1291ea803bf17da31a57ca940cfec4915cff1d504b3665b4c84e809bc2a20e5241d76589594426420903548fde4f1967526ae1e047661a03b948dd94 SHA512 41f6374e600b9411c70e6b5748ad4f06d779a47c25005111a72c28b2eeb941ea7ceaaced19c7f2917f62e4f595a951c7bfcbbc85288610501306a26454deb872
+DIST rpki-client-7.0-cert.pem 335615 BLAKE2B 9848b986b8b3fe1cbea880fa3161d9292aaf3ec5e2d6668b422ec840c5055a4fed1d3f4c78bff07b7fc75fe6642de95c3ccb3c2e8ab2f34ef37c27883c7578db SHA512 80f59079cfe66734543d19347734ae82d18219184cf264cef620a867cf171258272ca4504afad65600800e5a8025fd5b686220a03fffedd402f715fca405fc41
 DIST rpki-client-7.0.tar.gz 430661 BLAKE2B bbc801f3369294de4f6f7c4d0365b9da87494e868aa47832ced79945f49959e5c02cf8d8f0b78050faffa2b880c48d019fb00a410d8cb1fa85728d81efd491c3 SHA512 40a23207e79ab6995f08d25beadf9035a9acde38ec56e6b90f7ee7ab337e318d6dc2a6f954e83f9239fddc83b331ceea7615269b1ff7ae85dd5aec101b402412
diff --git a/net-misc/rpki-client/files/rpki-client-6.6-update.patch b/net-misc/rpki-client/files/rpki-client-6.6-update.patch
deleted file mode 100644
index 8825143..0000000
--- a/net-misc/rpki-client/files/rpki-client-6.6-update.patch
+++ /dev/null
@@ -1,23 +0,0 @@
---- a/update.sh	2020-05-19 20:19:49.501990424 +0200
-+++ b/update.sh	2020-05-19 20:20:15.889108790 +0200
-@@ -4,20 +4,6 @@
- openbsd_branch=`cat OPENBSD_BRANCH`
- openbgpd_version=`cat VERSION`
- 
--# pull in latest upstream code
--echo "pulling upstream openbsd source"
--if [ ! -d openbsd ]; then
--	if [ -z "${RPKICLIENT_GIT}" ]; then
--		git clone https://github.com/rpki-client/rpki-client-openbsd.git openbsd
--	else
--		git clone "${RPKICLIENT_GIT}/openbsd"
--	fi
--fi
--(cd openbsd/src
-- git fetch
-- git checkout "${openbsd_branch}"
-- git pull --rebase)
--
- # setup source paths
- dir=`pwd`
- patches="${dir}/patches"
diff --git a/net-misc/rpki-client/rpki-client-7.0.ebuild b/net-misc/rpki-client/rpki-client-7.0.ebuild
index 8cb4d27..5481772 100644
--- a/net-misc/rpki-client/rpki-client-7.0.ebuild
+++ b/net-misc/rpki-client/rpki-client-7.0.ebuild
@@ -8,7 +8,8 @@ MY_P="${PN}-${MY_PV}"
 
 DESCRIPTION="Portability shim for OpenBSD's rpki-client"
 HOMEPAGE="https://rpki-client.org/"
-SRC_URI="mirror://openbsd/${PN}/${PN}-${MY_PV}.tar.gz"
+SRC_URI="mirror://openbsd/${PN}/${PN}-${MY_PV}.tar.gz
+https://lg.breizh-ix.net/ssl/cert.pem -> ${PN}-${MY_PV}-cert.pem"
 
 LICENSE="ISC"
 SLOT="0"
@@ -37,8 +38,12 @@ src_configure() {
 
 src_install() {
 	emake DESTDIR="${D}" BINDIR="/usr/bin" MANDIR="/usr/share/man" install
+
 	insinto /etc/rpki
 	doins *.tal
 	keepdir "/var/db/${PN}/"
 	fowners -R _rpki-client "/var/db/${PN}/"
+
+	insinto /etc/ssl
+	newins "${A}/${PN}-${MY_PV}-cert.pem" cert.pem
 }