Port 324RPKI Router Protocol over TLS

Encrypted RPKI Router Protocol sessions used by routers to retrieve validated route-origin data from RPKI cache servers.

inSecurity Network Services

transport: tcp
in transit: encrypted
assignment: official
risk: 2/10
lookups: 0

also known as rpki-rtr-tls, RPKI-RTR over TLS, RTR over TLS

Technical Details

what runs on :324

The client establishes a TCP connection to port 324 and completes a TLS handshake before exchanging binary RPKI-RTR protocol data. RTR uses framed PDUs carrying session, serial-query, reset, and validated-prefix information; routers use these exchanges to synchronize a cache's current or incremental routing-validation state. TCP 323 is the commonly assigned non-TLS RTR port, while TCP 324 identifies the TLS transport.

Security Information

exposure of :324

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

security averages 3.2 across 326 ports — this one sits 1.2 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

TLS provides confidentiality and integrity for the RTR exchange, and deployments should validate the configured cache server's identity and restrict which caches routers trust. The service exposes routing-validation data rather than general router administration, but an exposed or misconfigured cache endpoint can enable denial of service or delivery of untrusted data; internet reachability may be intentional for public RPKI caches.

Record

iana registry entry

port: :324
service: RPKI Router Protocol over TLS
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 2/10safe
category: Security Network Services
usage: An RPKI validator or cache server listens on TCP 324 while routers connect to retrieve validated prefix-origin data using the RPKI Router Protocol. It is the TLS-protected counterpart to the conventional RTR service on TCP 323.
lookups: 0rank 994
added: 2026-09-16
updated: 2026-09-16
references: IANA service name registry — port 324
RFC 6810

Something wrong?

This record is maintained by the engineers who use port 324. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-16.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 326 in security →

the 8 most looked-up other ports in security — 326 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :324RPKI Router Protocol over TLS

Technical Details

Security Information

Related Ports

Port 324RPKI Router Protocol over TLS