PGP public keys are used when PGP encryption and/or signing is part of your integration with Pagero.

Files sent **to** Pagero are encrypted with Pagero's public key, so that only Pagero can decrypt them. Files sent **from** Pagero are signed with Pagero's private key, so that you can verify the origin and integrity of the file using the same public key.

If you want Pagero to encrypt files sent to you, or to verify files you sign, you need to supply us with your own public key.

Download Pagero's public key in ASCII-armored format ([`.asc`](https://en.m.wikipedia.org/wiki/Pretty_Good_Privacy#OpenPGP)) below.

### Pagero Online PGP public key

- Download: [:icon-download:Pagero Online PGP public key [!badge icon="check-circle" variant="success" text="Current"]](https://github.com/pagero/integration-resources/raw/main/certificates/pgp/pagero-online/pagero-online-pgp-public.asc)
- Valid from: `2026-07-13`
- Valid to: `2028-07-13`
- Key type and size: `RSA 4096`
- Pub fingerprint [SC]: `152A D3D2 CD12 5030 F1F6  E1B0 2237 2321 750F BCEC`
- Sub fingerprint [E]: `17C2 3C33 D768 45EA D5D6  37E7 4E85 3EA8 0384 6180`

!!!
**NOTE:** Always verify the fingerprint of the downloaded key against the value published above before using it. You can print the fingerprint with:

```bash
gpg --show-keys --with-fingerprint --with-subkey-fingerprint pagero-online-pgp-public.asc
```
!!!