diff --git a/cmatrix/.signature b/cmatrix/.signature
index b00794574..22476b6ec 100644
--- a/cmatrix/.signature
+++ b/cmatrix/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF35DqbjNiM3wZ35hi4veLjyMVMqnuuuLRljShea65nbBJ4vfUgC31WkfKYUUetGFhGtiQnYclUnOjGYdqk0zO7wI=
-SHA256 (Pkgfile) = fc4efc01d5b4e46d5cb4be2152d30be07b0e245b0e7f00d1d0c16d33214698b0
+RWSagIOpLGJF353J2YcQOLhGm6KIoLmeeal2Rk2CCQIa2oA5ObpEoZRm9amygnpEkn3EC5Sb8ykXbU9iJ6lVU5cIC54SQYbbfAA=
+SHA256 (Pkgfile) = bc8a07555ec9fcc285862f1f6bde13a1b430358c6273dba518963a725ce26048
 SHA256 (.footprint) = 813bd11d0a2f4c0c1cfc48afb74507d985dd8fc000753fbd13e52eb6c46c8ae3
 SHA256 (cmatrix-v2.0.tar.gz) = ad93ba39acd383696ab6a9ebbed1259ecf2d3cf9f49d6b97038c66f80749e99a
diff --git a/cmatrix/Pkgfile b/cmatrix/Pkgfile
index 191ad9d6e..d71b11680 100644
--- a/cmatrix/Pkgfile
+++ b/cmatrix/Pkgfile
@@ -1,5 +1,5 @@
 # Description: Show a scrolling 'Matrix' like screen in Linux.
-# URL:         http://www.asty.org/cmatrix/
+# URL:         https://www.asty.org/cmatrix/
 # Maintainer:  Thomas Penteker, tek at serverop dot de
 # Packager:    Vincenzo Colosimo vico at bicisport dot de
 # Depends on:  cmake
diff --git a/mplayer-vaapi/.signature b/mplayer-vaapi/.signature
index da2077eaf..f6b664bdf 100644
--- a/mplayer-vaapi/.signature
+++ b/mplayer-vaapi/.signature
@@ -1,6 +1,6 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF3/1dc8MmpCxSS34qhl2FS05OccIcGjCBbTxTYCHohWYguwoKvE/PAEZVmr+Mv/TsP1NXRoQO31LpKrSqbvl6+gc=
-SHA256 (Pkgfile) = d971fdd3760cf548d10a3fbdaaa82a13b52d0ec57a111a78bd08dbc4852d62e5
+RWSagIOpLGJF31KMQtweS8nWrfwn1JVwvVjoCu0fsBkioA99AeSekMxhChY8PghLUnGjO8ic8ME2zOaqvNFPMlkL1JcPuDJhgQo=
+SHA256 (Pkgfile) = 5dd46216c2bcbcfa22e142230b0b543749c0e7508d5caddd5f876185f85c9b3b
 SHA256 (.footprint) = c4022a781b4eed8125c34441be6094deda7e20f9463587f6d17478545820f566
 SHA256 (mplayer-vaapi-2013-09-12.tar.xz) = 5d7f57bf823e4fc554cb74312bc9bee7ec8f1155aca8f1be34cc5675230a7e83
 SHA256 (font-arial-iso-8859-1.tar.bz2) = 9730f481764f367c9089d0166fb6ccf9148808ffbbfeca635cf0e6db75765d29
diff --git a/mplayer-vaapi/Pkgfile b/mplayer-vaapi/Pkgfile
index bf345a4c7..173e80dcf 100644
--- a/mplayer-vaapi/Pkgfile
+++ b/mplayer-vaapi/Pkgfile
@@ -1,5 +1,5 @@
 # Description:  Versatile media player and encoder/converter
-# URL:          https://gitorious.org/vaapi/mplayer/
+# URL:          https://github.com/gbeauchesne/mplayer-vaapi
 # Maintainer:   Thomas Penteker, tek at serverop dot de
 # Depends on:   freetype glu libva xorg-libxinerama xorg-libxxf86dga yasm
 # Optional:     libva-intel libsdl libjpeg-turbo libpng lame zlib libogg libvorbis cdparanoia win32-essential-codecs faac x264 libdvdnav libdca
@@ -23,7 +23,7 @@ build() {
       --codecsdir=/usr/share/codecs \
       --confdir=/etc/mplayer \
       --enable-vaapi
- 
+
   make
   make DESTDIR=$PKG install
 
diff --git a/python3-ply/.signature b/python3-ply/.signature
index d9b316276..82da4bc52 100644
--- a/python3-ply/.signature
+++ b/python3-ply/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF39hNT359lbLRPlu5ldKLvm2Te3smAKJFNnNQDxt8bPolXaRQO9Xmxt1HQeWKBzHr9gbJrwFxkalRX7tUiKB3aw0=
-SHA256 (Pkgfile) = f20ce00df10c1354f0bfedaf6bc9c69b8ce745e9bf6c4eaed1b5678821d284d4
+RWSagIOpLGJF37d7SHEU3o6nkWBwgEcyASlOuh5kI6BOt2uO3Hlz3tCYvNfSDmCrqrYIMnJ/Zg+uDHnM+v2lrFr8VJmsdDhJGwg=
+SHA256 (Pkgfile) = 7c3b120fe00cf1cf398d4c584544bc7a68292da439948351082e1d1ad1808d81
 SHA256 (.footprint) = d39a46b64673367949496f673c97cb3d58310d891111103e6c071842a86056ae
-SHA256 (ply-3.11.tar.gz) = 00c7c1aaa88358b9c765b6d3000c6eec0ba42abca5351b095321aef446081da3
+SHA256 (ply-3.11.tar.gz) = 928c5642612f4710b168d3c49c25f6ece2913a5e8d1c5e37fde5d6162fec3fd2
diff --git a/python3-ply/Pkgfile b/python3-ply/Pkgfile
index ee4c89dad..d854d28b6 100644
--- a/python3-ply/Pkgfile
+++ b/python3-ply/Pkgfile
@@ -1,13 +1,12 @@
 # Description: Lex and yacc parsing tools for Python
-# URL: https://www.dabeaz.com/ply/
+# URL: https://github.com/dabeaz/ply
 # Maintainer: Tim Biermann, tbier at posteo dot de
 # Depends on: python3-setuptools
 
 name=python3-ply
 version=3.11
 release=1
-# ssl cert seems broken..
-source=(http://www.dabeaz.com/ply/ply-$version.tar.gz)
+source=(https://github.com/dabeaz/ply/archive/$version/ply-$version.tar.gz)
 
 build() {
   cd ply-$version
diff --git a/skipfish/.signature b/skipfish/.signature
index 1b962f960..472f448bd 100644
--- a/skipfish/.signature
+++ b/skipfish/.signature
@@ -1,6 +1,6 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF3xdxK3+UCc2Tzyv0ybch0HiA55HslkBApsTKPZo2WrSanF05r9RnEUO0lYBYsGvc+ofJ2/ObkROFhDvRvLffegc=
-SHA256 (Pkgfile) = bc6a17517829c15f2952eff3f2c68c8a431358ef97c1125520669c3476985fdc
+RWSagIOpLGJF385X4XY44L3wZ77kGbqqrLVN8EkdK65lJnzOo5XoGiSomAN3U0ucVMi6HqJ/GWEkIbzNTwTtLLa0j0OofQc6ogo=
+SHA256 (Pkgfile) = 09cfedcbcde799283842c7e3c57c7413dfe7ff561c2621560e66f5248f15bf97
 SHA256 (.footprint) = df675d7d0e900e9960b5d5c6db3f3d30ab6822c93077f64e5c29b93f286b7338
 SHA256 (skipfish-2.10b.tgz) = 1a4fbc9d013f1f9b970946ea7228d943266127b7f4100c994ad26c82c5352a9e
 SHA256 (skipfish.patch) = 096e9f7095a499605c8bf29bb9737397e9d5a168ec47888004dc8c2e7ceb0b62
diff --git a/skipfish/Pkgfile b/skipfish/Pkgfile
index 81c8632fb..aedc09459 100644
--- a/skipfish/Pkgfile
+++ b/skipfish/Pkgfile
@@ -1,5 +1,5 @@
 # Description: web application security scanner
-# URL:         http://code.google.com/p/skipfish/
+# URL:         https://github.com/spinkham/skipfish
 # Maintainer:  Thomas Penteker, tek at serverop dot de
 # Depends on:  libpcre openssl1 zlib libidn