JWKS Catalog

Cloudflare Access (API)

OpenID Configuration https://api.cloudflareaccess.com/.well-known/openid-configuration
OAuth 2.0 Authorization Server Metadata https://api.cloudflareaccess.com/.well-known/oauth-authorization-server
JWKS URI https://api.cloudflareaccess.com/cdn-cgi/access/certs

Active Keys

KID Use Alg/Crv Key Length Observed
299f562d914e4c8b66a3d6fa968f4e08f3c0cfa147174548d965cce98cc74847 sig RS256 2048 2026-08-18
83d18cfde34f92d119ff374f19ec65389a190bee4720225ca275dc15044c08e6 sig RS256 2048 2026-07-07

Recently Deactivated Keys

(Most recent 10 records shown)

KID Use Alg/Crv Key Length Observed
2c3c23d409d613bed67c0be9d3afc585b652f6dda0a33172d59d39530cfc953a sig RS256 2048 2026-05-26 to 2026-08-18 (83 days)
22ed79b644696a16f36d16610bed389cf8055cb4026231bea593b6c4e9d27f5a sig RS256 2048 2026-04-14 to 2026-07-07 (84 days)
5095694c97b8c4a3d8486d4b423c42ba263cbbe52d2327d74e89f220c8e9479a sig RS256 2048 2026-03-02 to 2026-05-26 (85 days)
7b85f29077022badd58b4214f6e52b692db3ee5c8ec92e9d834f3707a340b363 sig RS256 2048 2026-01-19 to 2026-04-14 (85 days)
24681fa67dad7ced742d640a823a0c91f35ca50a5d43710d9a44650c31fc9669 sig RS256 2048 2025-12-08 to 2026-03-02 (84 days)
46350bb006dc6b11620ea428911ed0ced92354b1e09787bf233f0a52467286f2 sig RS256 2048 2025-10-27 to 2026-01-19 (84 days)
5ae6aa1b4877848525935b2db7d10da5ed39d79c722727211ffb98142f59614f sig RS256 2048 2025-09-15 to 2025-12-08 (84 days)
dcd7c749a280c4280ea63f0c0af2449f81e7430ce109e245ec505d08325e663c sig RS256 2048 2025-08-04 to 2025-10-27 (83 days)
b2d0ef1c5c9bfb31f7bc3ef01f62d7959c6cc80c04e5e64384b825b4d3226e4c sig RS256 2048 2025-07-17 to 2025-09-15 (60 days)
c07f3a693a42689510a593394cc92b4ed6ee90e3ee471fa9d29b84678eea7be9 sig RS256 2048 2025-07-17 to 2025-08-04 (18 days)