diff --git a/cacert.org b/cacert.org
index 22f0f4e..7f2947a 100644
--- a/cacert.org
+++ b/cacert.org
@@ -184,6 +184,15 @@ hopper.cacert.org	43200	IN	SSHFP	2 2 de43b28a103b0afa685dd4918515f0b8ddbc4422b47
 hopper.cacert.org	43200	IN	SSHFP	3 1 f450a0cb1816e519b3f03e9ea9c8a54a94955071
 hopper.cacert.org	43200	IN	SSHFP	3 2 cc1b07f5bc75760dbb98a5bc515bf9cf7f3559bff032d56ba37b32bc38031375
 
+; OIDC identity provider
+idp.cacert.org	43200	IN	A	213.154.225.249
+idp.cacert.org	43200	IN	AAAA	2001:7b8:616:162:3::17
+idp.cacert.org	43200	IN	SSHFP	3 1 a20250aadcd56e45f9ca3eb8522187a39e39b948
+idp.cacert.org	43200	IN	SSHFP	3 2 54e0e7a24bde42fc26c58a0b471f833a82f7a541041f1787c964a6d667107d0a
+idp.cacert.org	43200	IN	SSHFP	4 1 afa6bf0b29d6dc681fde48935406cbdcb45e5412
+idp.cacert.org	43200	IN	SSHFP	4 2 67d07f30d4812562afc6ba424065e4fb232d08eff38ef8d59e23fd529acfc7fc
+appregistration.cacert.org	43200	IN	CNAME	idp.cacert.org
+
 ; infrastructure host infra02
 infra02.cacert.org	43200	IN	A	213.154.225.230
 infra02.cacert.org	43200	IN	AAAA	2001:7b8:616:162:1::10