This site checks the catalog's cryptographic signature in your browser before showing anything, which needs JavaScript. The data itself is plain public HTTPS: the catalog lives at /catalog.json on this host.
/catalog.json
