diff --git a/gpgkeys/RPM-GPG-KEY-rpmfusion-free-el-9 b/gpgkeys/RPM-GPG-KEY-rpmfusion-free-el-9
new file mode 100644
index 0000000000000000000000000000000000000000..afc372b5c7ab08b852d39193852ae0026ec70305
--- /dev/null
+++ b/gpgkeys/RPM-GPG-KEY-rpmfusion-free-el-9
@@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=/O2H
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/prod.repos.d/redhat-9-aarch64.repo b/prod.repos.d/redhat-9-aarch64.repo
new file mode 100644
index 0000000000000000000000000000000000000000..d545e79b4324b5af775499d02f318d11dcccf1c9
--- /dev/null
+++ b/prod.repos.d/redhat-9-aarch64.repo
@@ -0,0 +1,55 @@
+[rhel-9-for-aarch64-baseos-rpms]
+name = Red Hat Enterprise Linux 9 for aarch64 - BaseOS (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/aarch64/baseos/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+enable_metadata = 1
+
+[rhel-9-for-aarch64-appstream-rpms]
+name = Red Hat Enterprise Linux 9 for aarch64 - AppStream (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/aarch64/appstream/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+enable_metadata = 1
+
+[rhel-9-for-aarch64-supplementary-rpms]
+name = Red Hat Enterprise Linux 9 for aarch64 - Supplementary (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/aarch64/supplementary/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-aarch64-rt-rpms]
+name = Red Hat Enterprise Linux 9 for aarch64 - Real Time (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/aarch64/rt/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-aarch64-highavailability-rpms]
+name = Red Hat Enterprise Linux 9 for aarch64 - High Availability (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/aarch64/highavailability/os
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-aarch64-resilientstorage-rpms]
+name = Red Hat Enterprise Linux 9 for aarch64 - Resilient Storage (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/aarch64/resilientstorage/os
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
diff --git a/prod.repos.d/redhat-9-ppc64le.repo b/prod.repos.d/redhat-9-ppc64le.repo
new file mode 100644
index 0000000000000000000000000000000000000000..8ed45deba76851a73e974dd161d6a1972760d1fa
--- /dev/null
+++ b/prod.repos.d/redhat-9-ppc64le.repo
@@ -0,0 +1,55 @@
+[rhel-9-for-ppc64le-baseos-rpms]
+name = Red Hat Enterprise Linux 9 for ppc64le - BaseOS (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/baseos/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+enable_metadata = 1
+
+[rhel-9-for-ppc64le-appstream-rpms]
+name = Red Hat Enterprise Linux 9 for ppc64le - AppStream (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/appstream/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+enable_metadata = 1
+
+[rhel-9-for-ppc64le-supplementary-rpms]
+name = Red Hat Enterprise Linux 9 for ppc64le - Supplementary (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/supplementary/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-ppc64le-rt-rpms]
+name = Red Hat Enterprise Linux 9 for ppc64le - Real Time (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/rt/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-ppc64le-highavailability-rpms]
+name = Red Hat Enterprise Linux 9 for ppc64le - High Availability (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/highavailability/os
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-ppc64le-resilientstorage-rpms]
+name = Red Hat Enterprise Linux 9 for ppc64le - Resilient Storage (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/ppc64le/resilientstorage/os
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
diff --git a/prod.repos.d/redhat-9-x86_64.repo b/prod.repos.d/redhat-9-x86_64.repo
new file mode 100644
index 0000000000000000000000000000000000000000..527b13c3aee8194eb4e8a1bc094ef0739a8b2435
--- /dev/null
+++ b/prod.repos.d/redhat-9-x86_64.repo
@@ -0,0 +1,235 @@
+[codeready-builder-for-rhel-9-x86_64-debug-rpms]
+name = Red Hat CodeReady Linux Builder for RHEL 9 x86_64 (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/codeready-builder/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[ansible-2.9-for-rhel-9-x86_64-rpms]
+name = Red Hat Ansible Engine 2.9 for RHEL 9 x86_64 (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/ansible/2.9/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[ansible-2.9-for-rhel-9-x86_64-rpms]
+name = Red Hat Ansible Engine 2.9 for RHEL 9 x86_64 (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/ansible/2.9/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[ansible-2-for-rhel-9-x86_64-rpms]
+name = Red Hat Ansible Engine 2 for RHEL 9 x86_64 (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/ansible/2/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-rt-source-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Real Time (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/rt/source/SRPMS
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[ansible-2.9-for-rhel-9-x86_64-debug-rpms]
+name = Red Hat Ansible Engine 2.9 for RHEL 9 x86_64 (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/ansible/2.9/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[codeready-builder-for-rhel-9-x86_64-source-rpms]
+name = Red Hat CodeReady Linux Builder for RHEL 9 x86_64 (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/codeready-builder/source/SRPMS
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-rt-debug-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Real Time (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/rt/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-highavailability-debug-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - High Availability (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/highavailability/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-appstream-debug-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - AppStream (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-supplementary-debug-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Supplementary (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/supplementary/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-highavailability-source-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - High Availability (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/highavailability/source/SRPMS
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[ansible-2.9-for-rhel-9-x86_64-source-rpms]
+name = Red Hat Ansible Engine 2.9 for RHEL 9 x86_64 (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/layered/rhel9/x86_64/ansible/2.9/source/SRPMS
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-supplementary-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Supplementary (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/supplementary/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[codeready-builder-for-rhel-9-x86_64-rpms]
+name = Red Hat CodeReady Linux Builder for RHEL 9 x86_64 (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/codeready-builder/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-baseos-source-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - BaseOS (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/source/SRPMS
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-rt-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Real Time (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/rt/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-highavailability-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - High Availability (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/highavailability/os
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-appstream-source-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - AppStream (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/source/SRPMS
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-resilientstorage-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Resilient Storage (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/resilientstorage/os
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-baseos-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - BaseOS (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+enable_metadata = 1
+
+[rhel-9-for-x86_64-appstream-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - AppStream (RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/appstream/os
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+enable_metadata = 1
+
+[rhel-9-for-x86_64-baseos-debug-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - BaseOS (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/debug
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-resilientstorage-source-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Resilient Storage (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/resilientstorage/source/SRPMS
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-supplementary-source-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Supplementary (Source RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/supplementary/source/SRPMS
+enabled = 1
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
+
+[rhel-9-for-x86_64-resilientstorage-debug-rpms]
+name = Red Hat Enterprise Linux 9 for x86_64 - Resilient Storage (Debug RPMs)
+baseurl = https://cdn.redhat.com/content/dist/rhel9/9/x86_64/resilientstorage/debug
+enabled = 0
+gpgcheck = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+sslcacert = /certs/redhat-uep.pem
+sslclientcert = /certs/$certificate
diff --git a/prod.repos.d/redhat-ubi-9-x86_64.repo b/prod.repos.d/redhat-ubi-9-x86_64.repo
new file mode 100644
index 0000000000000000000000000000000000000000..c66cdd03e5126e42380185e25e14cc1c5361bd6d
--- /dev/null
+++ b/prod.repos.d/redhat-ubi-9-x86_64.repo
@@ -0,0 +1,62 @@
+[ubi-9-baseos]
+name = Red Hat Universal Base Image 9 (RPMs) - BaseOS
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/baseos/os
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-baseos-debug]
+name = Red Hat Universal Base Image 9 (Debug RPMs) - BaseOS
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/baseos/debug
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-baseos-source]
+name = Red Hat Universal Base Image 9 (Source RPMs) - BaseOS
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/baseos/source/SRPMS
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-appstream]
+name = Red Hat Universal Base Image 9 (RPMs) - AppStream
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/appstream/os
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-appstream-debug]
+name = Red Hat Universal Base Image 9 (Debug RPMs) - AppStream
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/appstream/debug
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-appstream-source]
+name = Red Hat Universal Base Image 9 (Source RPMs) - AppStream
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/appstream/source/SRPMS
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-codeready-builder]
+name = Red Hat Universal Base Image 9 (RPMs) - CodeReady Builder
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/codeready-builder/os
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-codeready-builder-debug]
+name = Red Hat Universal Base Image 9 (Debug RPMs) - CodeReady Builder
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/codeready-builder/debug
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
+
+[ubi-9-codeready-builder-source]
+name = Red Hat Universal Base Image 9 (Source RPMs) - CodeReady Builder
+baseurl = https://cdn-ubi.redhat.com/content/public/ubi/dist/ubi9/9/x96_64/codeready-builder/source/SRPMS
+enabled = 1
+gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+gpgcheck = 1
diff --git a/prod.repos.d/rpmfusion.repo b/prod.repos.d/rpmfusion.repo
index 449f8117728ea8a70c2b0d58c75b5e8fd1359777..f02ebe6568c9a6ac4bcb4df9d3a0e30e8a7dd0b2 100644
--- a/prod.repos.d/rpmfusion.repo
+++ b/prod.repos.d/rpmfusion.repo
@@ -11,3 +11,17 @@ baseurl=http://download1.rpmfusion.org/nonfree/el/updates/8/x86_64/
 enabled=1
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-el-8
+
+[rpmfusion-9-free-updates]
+name=RPM Fusion for EL 9 - Free - Updates x86_64
+baseurl=http://download1.rpmfusion.org/free/el/updates/9/x86_64/
+enabled=1
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-el-9
+
+[rpmfusion-9-nonfree-updates]
+name=RPM Fusion for EL 9 - Non-Free - Updates x86_64
+baseurl=http://download1.rpmfusion.org/nonfree/el/updates/9/x86_64/
+enabled=1
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-el-9
diff --git a/prod.repos.yaml b/prod.repos.yaml
index cbaf377b343e86713cc8efd00f1789761bee009e..b9b6c5e75eee35e38eb6dc79f4ca9625fe9ebb0f 100644
--- a/prod.repos.yaml
+++ b/prod.repos.yaml
@@ -160,12 +160,30 @@ redhat-8-ppc64le.repo:
   run_customscript: true
   customscript: 'bash /root/rhn_update_cert_symlink.sh'
 
+redhat-9-x86_64.repo:
+  pathroot: ''
+  run_customscript: true
+  customscript: 'bash /root/rhn_update_cert_symlink.sh'
+
+redhat-9-aarch64.repo:
+  pathroot: ''
+  run_customscript: true
+  customscript: 'bash /root/rhn_update_cert_symlink.sh'
+
+redhat-9-ppc64le.repo:
+  pathroot: ''
+  run_customscript: true
+  customscript: 'bash /root/rhn_update_cert_symlink.sh'
+
 redhat-ubi-7-x86_64.repo:
   pathroot: ''
 
 redhat-ubi-8-x86_64.repo:
   pathroot: ''
 
+redhat-ubi-9-x86_64.repo:
+  pathroot: ''
+
 tpc.repo:
   pathroot: 'mirror/tungsten'
   pathcut: '148.251.5.90'