Installing The CA

On RISENet, HTTPS and other services that use TLS will require the installation of a root certificate. This is the ultimate source of cryptographic authority for all RISENet domains, email and HTTPS.

The file can be downloaded here, and is also available as raw ASCII and a curl command below.

Setup instructions for popular operating systems are found below. You may find that though commandline tools will work after the certificate is installed on your OS, depending on configuration your web browser may not respect these settings. Instructions for specific web browsers can also be found here.

Windows

iOS

Clicking the download link should prompt you, telling you that you're downloading a profile. Click 'Allow', this will download the profile and then you'll need to head to Settings.

Scroll to the bottom of 'General' to 'VPN & Device Management'. You should see the RISENet Root CA profile, which you can install by tapping it.

You have now installed the CA, but you still need to trust it. For this head to 'General > About' and scroll down:

macOS

Double click the certificate

Linux

Linux instructions vary between distribution, so not everything is covered here. Email memphis@dotmail.rise or ping @aurillium on Discord if you have instructions for other distributions.

Debian / Ubuntu / Kali / Raspberry Pi OS

sudo cp risenet_ca.crt /usr/local/share/ca-certificates/risenet_ca.crt
sudo update-ca-certificates

Arch / CachyOS / EndeavourOS / SteamOS

sudo cp risenet_ca.crt /etc/ssl/certs/risenet_ca.crt
sudo update-ca-trust

NixOS

# RISENet certificate
security.pki.certificates = [
  ''
  RISENet Root CA
  ===============
  -----BEGIN CERTIFICATE-----
  MIIDB...(rest of certificate)...uC2ME=
  -----END CERTIFICATE-----
  ''
];

Firefox

In about:preferences (settings), search 'certificate' and click of 'View Certificates...': This will open the certificate manager. Select the 'Authorities' tab: Click 'Import...' and select the RISENet CA file. You should get a prompt asking what to trust the certificate for. Choose all available options here. Press OK and then OK again to exit the certificate manager. The certificate should now be installed. You should be able to see the certificate in the authorities list of the certificate manager now.

Raw CA File

Direct link: https://rise.aurillium.space/risenet_ca.crt

Curl from RISENet (jq required):

curl -sk --resolve ca.risenet:443:10.128.128.128 https://ca.risenet/roots | jq -rc '.crts.[0]' >

Raw ASCII file: