What is MikroTik update server domain name?

Hi. What domain names (or IPs) do I need to allow and on which port in orded to make auto uptade work? My firewall is blocking any internet access for important nodes and only update servers are whitelisted. I got IP 54.192.229.248 captured on fw but reverse DNS shows “cloudfront.net” so I’m not sure if it’s accurate >_>

Okay tracked it down

upgrade.mikrotik.com

AS51894:

  1. 159.148.147.0/24
  2. 159.148.172.0/24