Introducing Agents.·Read
OverviewAgentsWorkflowsExecutionDeveloper ToolsSecurityLibrary
Updated Jul 15, 2026

Recon

Attribute a host through RIPE WHOIS

Forward WHOIS for a hostname through RIPE.net.

Agent
Attribute a host to an organizationFind who owns an IP rangeSeed reverse-WHOIS pivots

overview

What whois-with-ripe does

Hand it one hostname; Trickest runs the RIPE.net WHOIS query and writes the response as a file the next stage can read. No extra flags to tune.

Use it when the asset sits in RIPE's region and you need registry allocation data (inetnum, netname, org) rather than a generic mirror.

Compared with whoisninja, this is forward lookup on a single host, not reverse pivot by org or email. Feed ownership into asnmap or reverse-WHOIS next.

use cases

Where whois-with-ripe fits

Attribute a host to an organization

Query a hostname through RIPE to recover the registered netblock owner and contact handles, confirming an asset belongs to the target before you scope further work.

Find who owns an IP range

Resolve the inetnum record that contains a hostname so you can read the netname, org, and country for the allocation and pivot from one asset to the surrounding range.

Seed reverse-WHOIS pivots

Pull the org and maintainer fields, then feed them into a reverse-WHOIS tool to find sibling domains and networks registered under the same entity.

Enrich a recon dataset

Run the lookup across discovered hosts to attach registry ownership records to each one, turning a flat host list into an attributed inventory for OSINT triage.

reference

whois-with-ripe inputs and flags

1 inputs
NameTypeFlagDescription
hostnameSTRING·Hostname to look up WHOIS and network-ownership records for through RIPE.net.

Showing key inputs. whois-with-ripe exposes 1 inputs in total.

example

Run whois-with-ripe

whois-with-ripe · command
# look up a host's WHOIS and network-ownership record through RIPE.netwhois-with-ripe example.com
sample output
inetnum:        198.51.100.0 - 198.51.100.255netname:        EXAMPLE-DOC-NETdescr:          Example Documentation Networkcountry:        NLorg:            ORG-EX1-RIPEadmin-c:        EXA7-RIPEstatus:         ASSIGNED PAmnt-by:         EXAMPLE-MNTcreated:        2018-11-06T13:42:00Zsource:         RIPE # Filtered

guidance

Choosing whois-with-ripe

Use when a target sits in RIPE's region and you need authoritative ownership for one hostname. For bulk reverse lookups by org or email, use whoisninja instead.

whoisninja

Reverse WHOIS by org, email, phone, or domain. Pivot from owner to assets; do not use it to read one host.

asnmap

Maps a target to ASN and CIDR ranges. Pair with RIPE WHOIS for full network attribution.

faq

whois-with-ripe questions

RIPE holds authoritative allocation records for Europe, the Middle East, and parts of Central Asia. For those ranges you get registry data instead of a possibly stale third-party mirror.

related

More Recon tools

  1. amass

    Multi-source subdomain discovery; hand names to httpx.

  2. amass-intel

    OWASP Amass intel: map an organization's root domains and ranges.

  3. assetfinder

    Find domains and subdomains potentially related to a given domain.

  4. bbot

    Modular OSINT recon that chains modules from a seed target.

  5. bevigil

    CLI client for the BeVigil OSINT API, keyed by domain or app package.

  6. cloud-enum

    Multi-cloud public name enumeration for AWS, Azure, and GCP.

Run whois-with-ripe yourself

A hostname feeds whois-with-ripe, which queries the RIPE database and writes the registration records as a file the next stage can pivot on.

Open whois-with-ripe in the libraryBuild a workflow with it

Facts on this page come from the live Trickest tool library.