Prow is running on an OpenShift cluster running on servers provided to the metal3.io project by packet.net.
SSL certificates for applications (*.apps.ci.metal3.io) and the API (api.ci.metal3.io) are managed by cert-manager and issued by letsencrypt.
See ssl/README.md for details.