We don't confirm or deny individual host key fingerprints for ssh.railway.com, and we don't publish a fingerprint list or known_hosts entry for it.

The endpoint is served by multiple hosts, each with its own key, and those hosts change at any time without notice. The fingerprint you see can differ between connections and over time, and a changed fingerprint is expected. How you handle host key trust for this endpoint is up to you.

Thank you for your response.

I understand that Railway uses multiple SSH hosts and that their fingerprints may change.

My goal is to safely download a SQLite database backup from my Railway persistent volume to my Windows computer.

The backup file is located at:

/data/respaldo_territorio.sqlite3

Could you please provide an officially supported and secure method to download this file using Railway CLI, SCP, SFTP, or another mechanism, without disabling SSH host identity verification?

I want to preserve my production database and avoid any risk of data loss.

Thank you for your assistance.

Every supported way to copy a file off a volume, including the Railway CLI, SCP, SFTP, and railway volume files download, goes through the same SSH connection, so there is no separate download path that avoids it. Host key trust for that connection is handled by the SSH client on your computer, and configuring that local setup is outside what our support covers.

Within that connection, the CLI's documented download command is railway volume files download <remote path> <local path>, and railway volume files list / shows where the file sits in the volume. It reads the file without changing your database, and it needs the attached service to be running. The volume CLI reference lists every option.