Let’s Encrypt Certificate on MikroTik – Auto-Renewal Clarification

RouterOS Scripting
1

Hi everyone,

I’ve successfully generated a Let’s Encrypt certificate on my MikroTik router using the built-in ACME client. The certificate is used for HTTPS communication and appears as trusted by another certificate (Let’s Encrypt R10).

image
image2280×760 67.7 KB

My main question is:

Does the ACME client in RouterOS automatically renew this certificate before expiration, or do I need to inject a script (e.g., via scheduler) to handle the renewal and re-import process manually?

Also, if manual steps are required:

What is the best practice for automating this (e.g., script examples)?
Does it require web service port reopening (TCP 80) every 90 days?

Any guidance or confirmation from others who have implemented automatic renewals would be appreciated.

Thanks!