Skip to main content
Available in🇮🇳 India🇲🇾 Malaysia🇸🇬 Singapore🇺🇸 United States
You can whitelist Razorpay-issued SSL certificates and IP addresses to communicate with Razorpay APIs and Webhooks. By downloading Razorpay SSL certificates and whitelisting our IPs, you can verify that you are securely communicating with our servers.

​
SSL Certificates

Update (September 2026): Razorpay no longer publishes new SSL certificate files. The table below is provided for historical reference only, with X10 being the last certificate published. Do not pin these certificates.For the current SSL certificate policy, including certificate pinning, root certificates, certificate changes, verification steps and FAQs, see the Guidelines for SSL Certificate Rotation.
Past SSL certificates for api.razorpay.com, along with their validity periods, are listed below. These files applied to past rotations only. Do not pin or whitelist them for new integrations.
Watch Out!We highly discourage pinning our SSL certificate to your applications. If your internal policy mandates pinning, pin all the root CA certificates listed on the Guidelines for SSL Certificate Rotation page, not the certificate files above. Otherwise, use the latest CA Bundle provided by your OS.

​
Webhook IPs

Below is the list of IPs from which Webhooks are sent from our servers.
We highly recommend using Webhook Signature to validate the integrity of the webhooks, even if you have whitelisted our Webhook IPs. Razorpay Security