This artifact originates from the Orbit Project at Eclipse, it is an osgi bundle and is signed as well.
'org.eclipse.jetty.orbit:javax.servlet:2.5.0.v201103041518'
<dependency>
<groupId>org.eclipse.jetty.orbit</groupId>
<artifactId>javax.servlet</artifactId>
<version>2.5.0.v201103041518</version>
</dependency>
<dependency org="org.eclipse.jetty.orbit" name="javax.servlet" rev="2.5.0.v201103041518"/>
"org.eclipse.jetty.orbit", "javax.servlet", "2.5.0.v201103041518"