Our git repositories have an invalid/expired certificate https://pkgs.fedoraproject.org/cgit/rpms/
This is because it's using a self-signed certificate because of how the fedpkg client operates.
See https://fedorahosted.org/fedora-infrastructure/ticket/2324 for the discussion on fixing this.