Signing public keys

Returns the active public keys used to verify the cryptographic signature of callback requests. Each key includes a unique identifier and expiration date to support seamless key rotation. When validating a callback, use the X-Signed-By in the request signature header to select the corresponding public key from this list. The endpoint preserves the current key and the previous one to ensure all signatures remain verifiable during rotation periods.

[ { "id": "5ac5ae43-01d2-4c70-8a5b-b69a34d11c62", "public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPD7wZq3e3yYPDM6JRME\nGppLXrqyUi32KPchJ5mNAZodVWUambhbOu/73Z9sbxYjMmiAjDo378j8BRAso6P8\nGOXsG/vZzvtFt6AZ8ufFzRtOaLmSSlwynhM2vhCP9b7GI8E24clxZmePDsYHj2oX\nBY/nGT56FfayOhpya5G0RNL+S8vC/CPF4WlSZ0+ebODGvbXY/oiPznZXUG7wt47c\nnzMRTmJkYkcz+IHs7C0+OzPMsXZToNrjJuTIWSrqcuYYncHWpxNUW5lLD36MoaaC\n3NVMeBHV2581a/m+MZvqa/GkSnC+MmcJ93q2k4PYUJ4cdAaVUN7qGfUjKznM60Ow\nwwIDAQAB\n-----END PUBLIC KEY-----\n", "expires_at": "2026-05-31 23:59:59" } ]

Request

Responses