Request for official SSH host key fingerprints for ssh.railway.com

Hello Railway Support,

We need to complete an Enterprise security certification for a Railway staging deployment, but our internal standard requires cryptographic verification of SSH host identity before using railway ssh.

We are blocked because railway ssh connects to ssh.railway.com, but we could not find official Railway-published SSH host key fingerprints, SSHFP DNS records, documented host key rotation, or an Enterprise-safe known_hosts procedure.

Please provide Railway-authoritative confirmation for:

1. The complete list of valid SSH host key fingerprints currently served by ssh.railway.com.
2. The key algorithms in use, especially ED25519.
3. Whether ssh.railway.com intentionally presents multiple fingerprints due to a distributed SSH gateway.
4. Whether any host key rotation happened recently.
5. The recommended Enterprise-safe procedure for populating known_hosts.
6. Whether Railway publishes SSHFP DNS records, or plans to publish official fingerprints in Railway docs.
7. The validity period or rotation policy for these host keys.

Observed fingerprints from our environment:

• ED25519 SHA256:i4DeDzyBsin0Z9pld8Otu61KGO3M2UYtvhYFaAkA/zw
• • ED25519 SHA256:DcDYFWljprUtKBD5aFpJJjCSv7RL2QT49K492IeSH4g
• • ED25519 SHA256:/5tyZA1jGtJWNmC4xhTYx/kQ3p0ZVzUmcUfENBnY9o8
• • ED25519 SHA256:+S1xg92FrnHz6pY3bpkmh1OGtWQGNANXilPzlxA7B1g

The blocking error is:

REMOTE HOST IDENTIFICATION HAS CHANGED

Host key verification failed for ssh.railway.com

We cannot accept trust-on-first-use, use StrictHostKeyChecking=no, or append keys from ssh-keyscan without Railway-authoritative confirmation.

For audit purposes, we need a clear written confirmation from Railway that identifies the valid fingerprints and the recommended trust procedure.

Thank you.