diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..727274d
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+/subscription-manager-rhsm-certificates-20220425.tar.gz
diff --git a/sources b/sources
new file mode 100644
index 0000000..0378584
--- /dev/null
+++ b/sources
@@ -0,0 +1 @@
+SHA512 (subscription-manager-rhsm-certificates-20220425.tar.gz) = c0b065a5b895f5193963ae8855ee2fbc13e69ee7702d298a193c902cca18391884db30f4787b4185e63c2140fb651af979136afa0ca42f0a076b8440935f4b73
diff --git a/subscription-manager-rhsm-certificates.spec b/subscription-manager-rhsm-certificates.spec
new file mode 100644
index 0000000..d641852
--- /dev/null
+++ b/subscription-manager-rhsm-certificates.spec
@@ -0,0 +1,50 @@
+Name: subscription-manager-rhsm-certificates
+Version: 20220425
+Release: 1%{?dist}
+Summary: Certificates required to communicate with a Red Hat Unified Entitlement Platform
+URL: https://www.candlepinproject.org/
+%if 0%{?suse_version}
+Group: Development/Libraries/Python
+License: GPL-2.0
+%else
+Group: Development/Libraries
+License: GPLv2
+%endif
+
+# How to create the source tarball:
+#
+# git clone https://github.com/candlepin/subscription-manager-rhsm-certificates.git
+# dnf install tito
+# tito build --tag subscription-manager-rhsm-certificates-$VERSION-$RELEASE --tgz
+Source0: %{name}-%{version}.tar.gz
+
+BuildArch: noarch
+
+BuildRequires: make
+
+%description
+This package contains certificates required for communicating with the REST interface
+of a Red Hat Unified Entitlement Platform, used for the management of system entitlements
+and to receive access to content.
+
+%prep
+%setup -q
+
+%build
+# Nothing to do for building
+
+%install
+%make_install \
+    PREFIX=%{_prefix} \
+    SYSCONFDIR=%{_sysconfdir}
+
+%files
+%license COPYING
+%dir %{_sysconfdir}/rhsm
+%dir %{_sysconfdir}/rhsm/ca
+%{_sysconfdir}/rhsm/ca/*.pem
+
+%changelog
+* Mon Apr 25 2022 Christopher Snyder <csnyder@redhat.com> 20220425-1
+- new package built with tito
+