RSA Public Keys

This section shares the two public keys used for the two environments (Sandbox and Production). The keys can be copied and stored as files to later be used in transaction processing

The GBiPayments public key currently plays one critical role of verifying the callback signatures. Callbacks from the platform carry a header named rsa-signature and with the public key, the signature can be verified as described here to confirm authenticity.

Sandbox Public Key

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

Production Public Key

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

We recommend that for each environment you're working with, the key content is copied and stored in your workflow based on how you see fit. In this documentation however, we will assume the content is stored in a file named gbipay.public.key.pem and referenced from there for all described usage.