Arratech Blog
The latest news and updates on Peppol Networks, Arratech, Peppol e-Invoicing and CTC.
The OpenPeppol PKI migration is a mandatory, breaking change that moves the Peppol network from G2 to G3 certificate authority chains. Service Providers must support both G2 and G3 by February 2026, with all G2 certificates revoked on 1 April 2026. The migration increases security but adds technical complexity, making dual-PKI support, testing and timely cut-over essential to avoid service disruption.
OpenPeppol is introducing mandatory security updates for the Peppol network. From 1 February 2026, all Service Metadata Publishers (SMPs) must operate exclusively over HTTPS, and CNAME-based SML lookups will be fully replaced by NAPTR records. These changes improve security and scalability but require Access Point and SMP providers to update certificates, DNS records and software in line with strict transition timelines.
Ready for a simple connection to the future of e-Invoicing?
Join the next generation of e-Invoicing infrastructure from Arratech.
Cut costs, stay compliant, and integrate effortlessly.