From: David Groep Date: Tue, 3 Nov 2026 09:30:00 +0100 Subject: Updated IGTF distribution 1.147 Dear Relying Parties, Authorities, Users, and all others interested, In this announcement of the IGTF: 1. Updated IGTF distribution version 1.147 available ============================================================================ 1. Updated IGTF distribution version 1.147 available ============================================================================ A new distribution of Accredited Authorities by the Interoperable Global Trust Federation, based on the IGTF Common Source, is now available. It includes newly accredited Authorities and retires obsolete trustanchors. This is version 1.147 (release 1), and it is now available for download from the Repository (and mirrors) at https://dist.igtf.net/distribution/igtf/current/ Changes from 1.146 to 1.147 --------------------------- (2 November 2026) * Add new CERN Root CA 3 and Grid CA 2 ICA (CERN) * Updated DFN-GridGermany-Root with new SHA-2 family self-signature (DE) * Removed discontinued DigiCert roots and ICAs from TAGPMA: DigiCertGridRootCA-Root, DigiCertGridTrustCAG2-Classic, DigiCertGridCA-1G2-Classic-2015, DigiCertAssuredIDRootCA-Root, DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1, DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 (US) * Removed obsolete TCS Gen4 and Gen4B issuing CAs, as well as the Gen4B private trust roots and USERTrustECCCertificationAuthority (EU) Due to the dependency of the (outgoing) InCommon-RSA-IGTF-Server-CA-3, the USERTrustRSACertificationAuthority is temporarily retained (US) Next Release ------------ Releases are usually done on the last Monday of the month, only when the trust anchor distribution has materially been updated. The currently- estimated next release of the distribution will be in end of December 2026 ========================================================================= REPEATED NOTICES ========================================================================= Use in coordinated-deployment infrastructures --------------------------------------------- If you are part of a coordinated-deployment infrastructure (e.g. a national or regional e-Infrastructure, EGI, OSG, PRACE-RI, NAREGI or others) you may want to await their announcement before installing the release. They could include localised adaptations. For reference we include the links below: EGI https://edu.nl/envyq (i.e. EGI provider docs HOWTO01) wLCG https://lcg-ca.web.cern.ch Open Science Grid https://repo.opensciencegrid.org/cadist/ Not all IGTF releases are necessarily accompanied by infrastructure-specific releases. If changes in the IGTF distribution do not materially impact the distribution of the relying party, no associated release may be done, nor is there a reason to update such a distribution. Supplementary download locations -------------------------------- The download repository is also mirrored by the EUGridPMA at https://dist.eugridpma.info/distribution/igtf/ and is also available from the Debian distribution for its supported version, e.g. https://packages.debian.org/stable-backports/igtf-policy-classic &c About this news letter ---------------------- This newsletter carries IGTF information intended for relying parties. For more information about this newsletter and how to subscribe, refer to the EUGridPMA web site at https://www.eugridpma.org/ +-----------------------------------------------------------------------+ | For information on the IGTF Distribution, how to use it and what is | | contains, please read the information at | | https://dl.igtf.net/distribution/igtf/README.txt | | | | This file contains important information for new users and should be | | read before installing this Distribution. | +-----------------------------------------------------------------------+ If you have suggestions or improvements for the distribution format, to have it better suit your needs, please contact the EUGridPMA PMA at or your Regional Policy Management Authority. See the IGTF web site (www.igtf.net) for further information.