diff --git a/cacert.org b/cacert.org
index fe92005..1e345c9 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,18 +1,20 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.126 2019/08/06 13:57:34 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.131 2020/05/10 12:45:36 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	1h	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2019080601	; Serial
+					2020031301	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					7d		; expire time
 					12h )		; negative caching TTL
 
 @		IN	NS	ns1.cacert.org.
+@		IN	NS	ns2.cacert.org.
 @		IN	NS	ns3.cacert.org.
-@		IN	NS	ns5.cacert.org.
+@		IN	NS	ns4.cacert.org.
+;@		IN	NS	ns5.cacert.org.
 
 @		IN	A	213.154.225.245
 @		IN	AAAA	2001:7b8:3:9c::245
@@ -30,10 +32,9 @@ $TTL	12h	;	default TTL for zone data
 @		IN	CAA	0 iodef "mailto:critical-admin@cacert.org"
 
 blog		IN	A	213.154.225.234
+blog		IN	AAAA	2001:7b8:616:162:2::13
 blog		IN	SSHFP	1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
 blog		IN	SSHFP	1 2 3afb452ac3690cf7cd9a3332813bf7b13dbd288c7a4efbd9ab9dd4b4649ff2b6
-blog		IN	SSHFP	2 1 aafba94ebe5c5c45cdf5ef10d0bc31bea4d9ecec
-blog		IN	SSHFP	2 2 4d4384ebd1906125ae26d2fa976596af914b4b3587f2204a0e01368a3640f680
 blog		IN	SSHFP	3 1 8fa85a31215f10ea78fd0126d1c705c9a3662c86
 blog		IN	SSHFP	3 2 86d330b900db9bf0a8bc9ec34b126aa8261fec9e02b123ab61c2aee0b56ae047
 blog		IN	SSHFP	4 1 90903e8f4b35457bf41235f070adf592d7f724dd
@@ -222,8 +223,13 @@ ns1		IN	AAAA	2001:7b8:616:0163::102
 ns3		IN	A	46.249.47.169		; mars.overmeer.net
 ns3		IN	AAAA	2a00:1ca8:2a::31
 
-ns5		IN	A	192.5.4.1		; sns-pb.isc.org
-ns5		IN	AAAA	2001:500:2e::1
+;ns5		IN	A	192.5.4.1		; sns-pb.isc.org
+;ns5		IN	AAAA	2001:500:2e::1
+
+ns2		IN	A	79.140.41.143		; ns1.astrath.net
+ns2		IN	AAAA	2001:4d88:2000:81::2
+ns4		IN	A	45.77.40.159		; ns2.astrath.net
+ns4		IN	AAAA	2001:19f0:4400:407d::1313
 
 ocsp		IN	A	213.154.225.237
 ocsp		IN	AAAA	2001:7b8:616:0163::103
@@ -258,6 +264,10 @@ secure		IN	A	213.154.225.246
 secure		IN	AAAA	2001:7b8:3:9c::246
 _443._tcp.secure  IN	TLSA	2 1 1 6f2851409d710504a35115abcb9a6dd3f2577ec937c9ef1938926fa82fd6ff5d
 
+selfservice	IN	A	213.154.225.241
+selfservice	IN	AAAA	2001:7b8:616:162:2::35
+
+
 svn		IN	A	213.154.225.238
 svn		IN	AAAA	2001:7b8:616:162:2::15
 svn		IN	SSHFP	1 1 1128972fb54f927477a781718e2f9c114e9ca383
@@ -339,8 +349,12 @@ webstatic	IN	SSHFP	4 1 A087EF97F4D014B4281A9E462DDC080354231873
 webstatic	IN	SSHFP	4 2 342DF8975A92B9FAC1763C63264EF9A0E9E686B416D5590B20BB0E84995EEFB0
 
 wiki		IN	A	213.154.225.235
+wiki		IN	AAAA	2001:7b8:616:162:2::12
 wiki		IN	SSHFP	1 1 5c3e0d3265782405e0141c47bf0e16ec14b12e08
-wiki		IN	SSHFP	2 1 04f7ab767579f004cc3ab2cc42a4ccaa24e51154
+wiki		IN	SSHFP	1 2 69101872cb629e30a78ca4aac781720e1217c3733f6bb8d659034e9c23c890df
+wiki		IN	SSHFP	3 2 88d73c828d56d3cccac530558bf0a1b2678c238f285c3ef6b61fa05ea782fd60
+wiki		IN	SSHFP	4 1 c1d79ceb8986b02b6b477f8c9e50b2623a15cfe8
+wiki		IN	SSHFP	4 2 6cfa531e0eebbb01b226444d33c238b83c96cc134d23662f95a36c095c4dfbdf
 
 www		IN	A	213.154.225.245
 www		IN	AAAA	2001:7b8:3:9c::245