diff --git a/cacert.org b/cacert.org
index bb3c6da..42fa142 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.80 2014/05/30 15:29:52 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.82 2014/06/10 13:03:07 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2014053001	; Serial
+					2014061001	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					2d		; expire time
@@ -25,8 +25,6 @@ arbitration	IN	A	213.154.225.241
 arbitration	IN	SSHFP	1 1 40d9c8ebcf8d41a04b990fbc5308675d029bf4ef
 arbitration	IN	SSHFP	2 1 7474bfb01af775511805bf15c45bb9d7591d0ce6
 
-audit		IN	A	78.46.255.66
-
 blog		IN	A	213.154.225.234
 blog		IN	SSHFP	1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
 blog		IN	SSHFP	2 1 aafba94ebe5c5c45cdf5ef10d0bc31bea4d9ecec
@@ -69,9 +67,16 @@ coaudit		IN	CNAME	infrastructure.cacert.org.
 
 community-vpn	IN	A	78.47.142.76
 
-crl		IN	A	213.154.225.236
+critmon		IN	A	89.106.208.38
+critmon		IN	AAAA	2a02:3e0::38
+critmon		IN	SSHFP	2 1 e400cedbf86df6fac72034318144d04767f6cc9c
+critmon		IN	SSHFP	2 2 62a3e853236e900b9e2fb8bc0fb0f3c184767f8582cd6b8ba46cc8589bb73889
+critmon		IN	SSHFP	3 1 07f6d9ab2981884d3c2a0a28327cd7fa3bdb2161
+critmon		IN	SSHFP	3 2 1074ce6cc0f02159e5ee6b05172d475c795ea1ffeaf99d9867781f117af33b4c
+critmon		IN	SSHFP	1 1 a3de0543f9e94a8a0c480a2b674de08f8d356da4
+critmon		IN	SSHFP	1 2 218f4191d5944901f53c7a06a495c7ad605c913006b53a7788d2dccf76ca4d42
 
-dev		IN	A	78.46.255.66
+crl		IN	A	213.154.225.236
 
 email		IN	A	213.154.225.228
 email		IN	SSHFP	1 1 bf391fd72656a275524d1d25a624c6045b44ae90
@@ -140,6 +145,8 @@ ocsp		IN	A	213.154.225.237
 ocsp1 		IN	A	213.154.225.237
 ocsp-ipv6	IN	AAAA	2001:7b8:616:0163::103
 
+openppm		IN	A	82.96.100.150
+
 pgpkeys		IN	CNAME	infrastructure.cacert.org.
 
 secure		IN	A	213.154.225.246
diff --git a/cacert.org.log b/cacert.org.log
index 1d366ca..d2dfe05 100644
--- a/cacert.org.log
+++ b/cacert.org.log
@@ -1,16 +1,26 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
 Working file: /var/opendnssec/unsigned/cacert.org
-head: 1.80
+head: 1.82
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 80;	selected revisions: 80
+total revisions: 82;	selected revisions: 82
 description:
 cacert.org - zone file for cacert.org
 ----------------------------
+revision 1.82
+date: 2014/06/10 13:03:07;  author: root;  state: Exp;  lines: +11 -2
+Add resource records for critmon.cacert.org.
+----------------------------
+revision 1.81
+date: 2014/06/01 07:40:21;  author: root;  state: Exp;  lines: +4 -6
+Drop A records for audit.cacert.org and dev.cacert.org (no longer existing) and
+add A record for openppm.cacert.org, per e-mail request from Benedik Heintel on
+June 1, 2014.
+----------------------------
 revision 1.80
 date: 2014/05/30 15:29:52;  author: root;  state: Exp;  lines: +6 -2
 Add some missing SSHFP records for infrastructure.cacert.org.