jwksfetch is a single Native AOT executable (no .NET runtime required) that retrieves a public
JSON Web Key from a remote JWKS endpoint or via OIDC discovery, then emits the key in PEM format
to stdout. Designed as a companion to jwtdecode: pipe jwksfetch output directly into
jwtdecode --verify --key-file - for end-to-end offline JWT verification after an initial key fetch.
Publisher’s description
What is JwksFetch?
JwksFetch is an open-source terminals & cli tool program for Windows from ShikeChen. It is written in C#.
Installation and requirements
Official installers exist for 64-bit and ARM64 as Portable. It runs without installation (portable).
Popularity and file types
The source code on GitHub (ShikeChen-MS/JwtDecoder_local_cli) has 1 stars. Similar programs include PowerShell, QPDF and Oh My Posh.
Project description on GitHub: “Offline-by-construction JWT decoder & verifier. Native AOT CLI (jwtdecode) + PowerShell module + NuGet library on Windows/Linux/macOS. Optional jwksfetch companion (separate binary, network-only there) resolves JWKS/OIDC issuers; pipe its PEM into jwtdecode --key-file -. HS/RS/PS/ES 256/384/512. Offline guarantee verified by 4-layer CI scanner.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- Portable: runs without installation
In short: JwksFetch is an open-source terminals & cli tool tool for 64-bit and ARM64 PCs.
Is JwksFetch safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
FFBE92AD58A2D1877DF919C20B5D2792C0CD88768DCDEA7F05DE51B69ACA4C84· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 1.2.2Latest | June 18, 2026 | — | 64-bit PortableARM64 Portable |
Install from the command line
Silent install ›winget install --id ShikeChen.JwksFetch -eProgram files (.exe): jwksfetch.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- ShikeChen
- Category
- Terminals & CLI tools
- Licence
- MIT
- Price
- Free
- Source code
- github.com/ShikeChen-MS/JwtDecoder_local_cli
- Written in
- C#
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64
- Installer
- Portable
- Version
- 1.2.2
- Released
- June 18, 2026
- Added to the catalogue
- June 18, 2026
- Versions listed
- 1
- GitHub stars
- 1
- GitHub forks
- 1
- Website
- github.com
- winget ID
- ShikeChen.JwksFetch
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to JwksFetch
See all ›-
PowerShell7.6.9.0PowerShell is a cross-platform task automation solution made up of a command-line shell, a scripting language, and a configuration management framework. PowerShell runs on Windows, Linux, and macOS.Open source689.6K ↓ -
QPDF12.4.2QPDF is a command-line tool and C++ library that performs content-preserving transformations on PDF files.Open source2.1M ↓ -
Open source820.8K ↓ -
Open source290.1K ↓ -
Open source1.5M ↓ -
Alacritty0.17.0Alacritty is a free and open-source GPU accelerated terminal emulator focused on performance and simplicity.Open source75.9K ↓ -
Free5.9M ↓ -
Cygwin3.7.0-0.590.gdae171e433cdA large collection of GNU and Open Source tools which provide functionality similar to a Linux distribution on Windows.Open source2.6M ↓
Frequently asked questions
Is JwksFetch free?
Yes. JwksFetch is open-source software under the MIT licence.
Is JwksFetch safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install JwksFetch with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does JwksFetch run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Can I use JwksFetch without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to JwksFetch?
PowerShell, QPDF, Oh My Posh, fzf and yq. The alternatives page compares them.
