Some older systems still display colon-delimited MD5 fingerprints. It is provided only for matching legacy output; SHA-256 should be the primary comparison.

Does an SSHFP record make a key trusted?

Not by itself. Verify the source key first, and use DNSSEC if SSH clients are expected to authenticate the DNS record.

SSH Public-Key Inspector

About SSH Public-Key Inspector

Parses the binary structure embedded in an OpenSSH public-key line, then calculates the same SHA-256 fingerprint form commonly shown by OpenSSH, a legacy MD5 fingerprint for comparison, deterministic randomart, and a SHA-256 SSHFP record. Processing happens entirely in this browser tab.

Supports RSA, Ed25519, and NIST P-256, P-384, and P-521 ECDSA public keys.
Accepts authorized_keys options before the recognized key type.
Rejects PEM and OpenSSH private-key blocks and limits decoded blobs to 64 KB.
Does not contact a host, validate ownership, publish DNS, or retain pasted keys.

Frequently Asked Questions

Why include MD5?: Some older systems still display colon-delimited MD5 fingerprints. It is provided only for matching legacy output; SHA-256 should be the primary comparison.
Does an SSHFP record make a key trusted?: Not by itself. Verify the source key first, and use DNSSEC if SSH clients are expected to authenticate the DNS record.

More Networking & IT Tools

All Networking & IT tools

Networking & IT

CIDR Aggregator

Summarize a list of IPv4 addresses and CIDR blocks into the minimal set of aggregated CIDR routes.

Networking & IT

VLSM IP Plan Designer

Allocate named IPv4 networks by host requirement, expose overflow and unused space, and export the finished address plan.

Networking & IT

VPN & Proxy Detector

Detect whether your connection is using a VPN or proxy, check for WebRTC leaks, and analyze DNS resolver.

Networking & IT

Network Diagnostics

Analyze your network connection with DNS speed tests, latency measurement, WebRTC detection, and browser capability checks.