From: David Groep <info@eugridpma.org>
Date: Wed, 5 May 2025 10:00:00 +0100
Subject: Updated IGTF distribution 1.135 - with new default signing key

Dear Relying Parties, Authorities, Users, and all others interested,

In this announcement of the IGTF:

  1. Updated IGTF distribution version 1.135 available

============================================================================
1. Updated IGTF distribution version 1.135 available
============================================================================

A new distribution of Accredited Authorities by the Interoperable Global
Trust Federation, based on the IGTF Common Source, is now available.  It
includes newly accredited Authorities and retires obsolete trustanchors.

This is version 1.135 (release 1), and it is  now available for download 
from the Repository (and mirrors) at

    https://dist.igtf.net/distribution/igtf/current/

Changes from 1.134 to 1.135
---------------------------
(5 May 2025)

* Updated SlovakGrid trust anchor with extended validity (SK)
* Withdrawn discontinued HPCI CA (JP)

NOTE: the _default_ package signing key has changed to the 4th generation
      for increased security and compatibility. The new key is a 2048 bit
      RSA with fingerprint 565F4528EAD3F53727B5A2E9B055005676341F1A.
      The GPG public key file can be retrieved from
        https://dl.igtf.net/distribution/current/GPG-KEY-EUGridPMA-RPM-4
      and imported on rpm-based distributions with 'rpmkeys --import <file>'
      or on Debian (apt) based systems set in Signed-By in sources.list or
      added as a file in /etc/apt/trusted.gpg.d/

      This change was first announced in the 1.122 release (August 2023),
      but a distribution signed with the generation-3 key remains available.
      A signature of the gen-4 key signed by the gen-3 GPG key is available
      from https://dl.igtf.net/distribution/current/ for validation.

Next Release
------------
Releases are usually done on the last Monday of the month,  only when the
trust anchor distribution  has  materially been  updated.  The currently-
estimated next release of the distribution will be in end of June 2025

=========================================================================
REPEATED NOTICES
=========================================================================

Use in coordinated-deployment infrastructures
---------------------------------------------
If you are part of a coordinated-deployment infrastructure (e.g. a national
or regional e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI or others) you may
want to await their announcement before installing the release.  They could
include localised adaptations. For reference we include the links below:
 EGI               https://edu.nl/envyq   (i.e. EGI provider docs HOWTO01)
 wLCG              https://lcg-ca.web.cern.ch
 Open Science Grid https://repo.opensciencegrid.org/cadist/
Not all IGTF releases are necessarily accompanied by infrastructure-specific
releases. If changes in the IGTF distribution  do not materially impact  the
distribution of the relying party, no associated release may be done, nor is
there a reason to update such a distribution.

Supplementary download locations
--------------------------------
The download repository is also mirrored by the EUGridPMA at
    https://dist.eugridpma.info/distribution/igtf/
and is also available from the Debian distribution for its supported version,
e.g. https://packages.debian.org/stable-backports/igtf-policy-classic &c

About this news letter
----------------------
This newsletter carries IGTF information intended for relying parties. 
For more information about this newsletter and how to subscribe, refer
to the EUGridPMA web site at https://www.eugridpma.org/

+-----------------------------------------------------------------------+
| For information on the IGTF Distribution, how to use it and what is   |
| contains, please read the information at                              |
|       https://dl.igtf.net/distribution/igtf/README.txt                |
|                                                                       |
| This file contains important information for new users and should be  |
| read before installing this Distribution.                             |
+-----------------------------------------------------------------------+

If you have  suggestions or improvements  for the distribution format,
to have it better suit your needs, please contact the EUGridPMA PMA at 
<info@eugridpma.org> or your Regional Policy Management Authority. See
the IGTF web site (www.igtf.net) for further information.