diff --git a/cacert.com b/cacert.com
index 3efb102..1e9de54 100644
--- a/cacert.com
+++ b/cacert.com
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.com, under RCS control
-; @(#)(CAcert) $Id: cacert.com,v 1.18 2014/06/11 09:14:21 root Exp $
+; @(#)(CAcert) $Id: cacert.com,v 1.19 2014/09/17 14:37:45 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	IN	SOA	ns1.cacert.com. hostmaster.cacert.com. (
-					2014061101	; Serial
+					2014091701	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					2d		; expire time
@@ -22,8 +22,8 @@ ns1		IN	A	213.154.225.251		; ns.cacert.org
 ns1		IN	AAAA	2001:7b8:616:0163::102
 ns3		IN	A	46.249.47.169		; mars.overmeer.net
 ns3		IN	AAAA	2a00:1ca8:2a::31
-ns4		IN	A	213.154.224.4		; ns-ext.nlnetlabs.nl
-ns4		IN	AAAA	2001:7b8:206:1::4:53
+ns4		IN	A	185.49.140.62		; ns-ext.nlnetlabs.nl
+ns4		IN	AAAA	2a04:b900::8:0:0:62
 ns5		IN	A	192.5.4.1		; sns-pb.isc.org
 ns5		IN	AAAA	2001:500:2e::1
 www		IN	CNAME	cacert.com.
diff --git a/cacert.com.log b/cacert.com.log
index 8d9af6e..7d07e3d 100644
--- a/cacert.com.log
+++ b/cacert.com.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v
 Working file: /var/opendnssec/unsigned/cacert.com
-head: 1.18
+head: 1.19
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 18;	selected revisions: 18
+total revisions: 19;	selected revisions: 19
 description:
 cacert.com - zone file for cacert.com
 ----------------------------
+revision 1.19
+date: 2014/09/17 14:37:45;  author: root;  state: Exp;  lines: +4 -4
+Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).
+----------------------------
 revision 1.18
 date: 2014/06/11 09:14:21;  author: root;  state: Exp;  lines: +3 -4
 Add IPv6 address for ns1.cacert.com.
diff --git a/cacert.net b/cacert.net
index 09cf771..13ed189 100644
--- a/cacert.net
+++ b/cacert.net
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.net, under RCS control
-; @(#)(CAcert) $Id: cacert.net,v 1.19 2014/06/11 09:15:32 root Exp $
+; @(#)(CAcert) $Id: cacert.net,v 1.20 2014/09/17 14:37:45 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	IN	SOA	ns1.cacert.net. hostmaster.cacert.net. (
-					2014061101	; Serial
+					2014091701	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					2d		; expire time
@@ -22,8 +22,8 @@ ns1		IN	A	213.154.225.251		; ns.cacert.org
 ns1		IN	AAAA	2001:7b8:616:0163::102
 ns3		IN	A	46.249.47.169		; mars.overmeer.net
 ns3		IN	AAAA	2a00:1ca8:2a::31
-ns4		IN	A	213.154.224.4		; ns-ext.nlnetlabs.nl
-ns4		IN	AAAA	2001:7b8:206:1::4:53
+ns4		IN	A	185.49.140.62		; ns-ext.nlnetlabs.nl
+ns4		IN	AAAA	2a04:b900::8:0:0:62
 ns5		IN	A	192.5.4.1		; sns-pb.isc.org
 ns5		IN	AAAA	2001:500:2e::1
 www		IN	CNAME	cacert.net.
diff --git a/cacert.net.log b/cacert.net.log
index d82a6f6..30fcded 100644
--- a/cacert.net.log
+++ b/cacert.net.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v
 Working file: /var/opendnssec/unsigned/cacert.net
-head: 1.19
+head: 1.20
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 19;	selected revisions: 19
+total revisions: 20;	selected revisions: 20
 description:
 cacert.net - DNS master zone file for cacert.net, under RCS control
 ----------------------------
+revision 1.20
+date: 2014/09/17 14:37:45;  author: root;  state: Exp;  lines: +4 -4
+Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).
+----------------------------
 revision 1.19
 date: 2014/06/11 09:15:32;  author: root;  state: Exp;  lines: +3 -2
 Add IPv6 address for ns1.cacert.net.
diff --git a/cacert.org b/cacert.org
index a4ea447..87fd7e6 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.86 2014/09/02 13:27:42 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.87 2014/09/17 14:37:45 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2014090201	; Serial
+					2014091701	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					2d		; expire time
@@ -141,8 +141,8 @@ ns1		IN	AAAA	2001:7b8:616:0163::102
 ns3		IN	A	46.249.47.169		; mars.overmeer.net
 ns3		IN	AAAA	2a00:1ca8:2a::31
 
-ns4		IN	A	213.154.224.4		; ns-ext.nlnetlabs.nl
-ns4		IN	AAAA	2001:7b8:206:1::4:53
+ns4		IN	A	185.49.140.62		; ns-ext.nlnetlabs.nl
+ns4		IN	AAAA	2a04:b900::8:0:0:62
 
 ns5		IN	A	192.5.4.1		; sns-pb.isc.org
 ns5		IN	AAAA	2001:500:2e::1
diff --git a/cacert.org.log b/cacert.org.log
index 30890d8..656318d 100644
--- a/cacert.org.log
+++ b/cacert.org.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
 Working file: /var/opendnssec/unsigned/cacert.org
-head: 1.86
+head: 1.87
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 86;	selected revisions: 86
+total revisions: 87;	selected revisions: 87
 description:
 cacert.org - zone file for cacert.org
 ----------------------------
+revision 1.87
+date: 2014/09/17 14:37:45;  author: root;  state: Exp;  lines: +4 -4
+Update IPv4 and IPv6 addresses for ns4.cacert.org (ns-ext.nlnetlabs.nl).
+----------------------------
 revision 1.86
 date: 2014/09/02 13:27:42;  author: root;  state: Exp;  lines: +7 -2
 Add A record for hopper.