Hello Railway team,

I need an authoritative Railway-authored method to verify the SSH host identity for ssh.railway.com before accepting a host key.

Using Railway CLI 5.41.2, an SSH connection attempt presented:

Host: ssh.railway.com

IP shown: 66.33.22.3

Host-key type: ED25519

Fingerprint: SHA256:AS1xq92FRnHz6pY3bpkmh10GtWQGNANXi1PzlxA7B1g

I aborted the connection before accepting the key, and known_hosts was not modified.

Could a Railway employee please provide an authoritative answer to one of the following:

Confirm whether that exact fingerprint is currently an authorized host key for ssh.railway.com; or

If Railway intentionally operates multiple valid host keys, provide the authoritative current list containing the valid fingerprints; or

Provide another Railway-approved cryptographic host-authentication procedure that does not require trust-on-first-use, ssh-keyscan as the trust anchor, StrictHostKeyChecking=no, or accept-new.

If Railway does not currently provide an authoritative host-key verification mechanism, please state that explicitly.

Thank you.