Razorpay IPs and Certificates

Download Razorpay SSL certificates and whitelist our API and Webhooks IP addresses.

You can whitelist Razorpay-issued SSL certificates and IP addresses to communicate with Razorpay APIs and Webhooks. By downloading Razorpay SSL certificates and whitelisting our IPs, you can verify that you are securely communicating with our servers.

SSL Certificates

SSL certificates for api.razorpay.com with valid date ranges are listed below.

Certificate File	Valid From	Expiry
X10.pem & Chain	Oct 9th, 2025	Nov 10th, 2026
X9.pem & Chain	Nov 11th, 2024	Dec 12th, 2025
X8.pem & Chain	Jan 5th, 2024	Jan 4th, 2025
X7.pem & Chain	Feb 3rd, 2023	Feb 2nd, 2024
X6.pem & Chain	May 19th, 2022	May 19th, 2023
X4.pem & Chain	July 7th, 2021	June 7th, 2022
X3.pem & Chain	March 13th, 2020	July 28th, 2021
X2.pem & Chain	April 10th, 2019	April 15th, 2020
X1.pem & Chain	Feb 7th, 2016	April 12th, 2019

As we roll out our infrastructure changes gradually, we recommend whitelisting our certificate as per Valid From/Expiry timelines. You should whitelist all the certificates in that range if they overlap.

Watch Out!

We highly discourage pinning our SSL certificate to your applications. Use the certificates provided in the table above only if you are mandated by internal policies to whitelist Razorpay’s SSL certificates. Instead, use the latest CA Bundle provided by your OS.

API IPs

Requests to Razorpay APIs should be routed to api.razorpay.com. This will be resolved to various IPs controlled by our load balancers. However, if the IPs to which the requests should be sent are restricted, all your API requests can be routed to prod-api-static.razorpay.com. This will be resolved to any of the following IPs:

API Ingress IPs

52.66.140.48
52.66.140.61
13.235.207.57
13.232.63.19
13.234.135.6
13.234.83.3 
13.235.208.84
13.235.96.132
15.206.46.184
18.99.160.48/29

Handy Tips

• 18.99.160.0/29 is a CIDR range. All the IPs in the range 18.99.160.48 - 18.99.160.55 are utilised.

• All our SDKs use proper DNS caching and honour the TTLs that we set. However, if you are not using our SDKs, ensure that DNS TTLs set by Razorpay are honoured and are not cached aggressively.

Webhook IPs

Below is the list of IPs from which Webhooks are sent from our servers.

Egress IPs

43.216.167.81
43.216.100.227
43.216.239.250

We highly recommend using Webhook Signature to validate the integrity of the webhooks, even if you have whitelisted our Webhook IPs.

UAT Static IPs

Below is the list of UAT egress IPs.

UAT Egress IPs

52.66.76.68
52.66.95.207
13.127.201.109

Related Information

Razorpay Security