Summary

  • The RIPE role object DA9499-RIPE — the administrative and technical contact for the silent autonomous system AS210860 — is described only by third-party mirrors: role name DFINFRA, address New-York-Ring 6, 22297 Hamburg, maintainer EDDI-MNT, created 10 June 2021 and last modified 27 October 2021. The authoritative RIPE Database lookup returned only an application shell during the October 2026 research pass (source).
  • No named natural person appears in any retrieved material. RIPE's own documentation says a role object may describe a business function and that person references are optional (source), so the absence of individuals is conformant, not anomalous.
  • The legal person behind the organisation handle ORG-EDG14-RIPE has changed form: German register mirrors record the merger of EDEKA DIGITAL GmbH (HRB 113314, formerly Lunar GmbH) into EDEKA Verwaltungs- und Beteiligungs GmbH (HRB 90516), with the merger entry recorded 5 August 2025 and EDEKA DIGITAL GmbH subsequently marked deleted (source, source).
  • Mirrors disagree on the current org-name behind ORG-EDG14-RIPE: ip.cc still renders EDEKA DIGITAL GmbH with a last-modified date of 27 October 2021 (source), while other renderings use the post-merger name, one attributing a last-modified date of 13 May 2026 that no inspected primary source confirms (source).
  • The contact layer's accountability value now runs through the commercial-register layer, not through the RIPE object itself: the surviving entity at the same Hamburg address is the only verifiable accountable party the evidence resolves to.

A contact object nobody can read

Every network registered in the RIPE region carries a contact layer: person or role objects that answer, in principle, the question of who is responsible when something goes wrong. For AS210860 — the autonomous system registered as "edeka_digital" under organisation ORG-EDG14-RIPE, and the directory object BTW tracks as DFINFRA — that layer consists of a single role handle, DA9499-RIPE.

What the public record shows about that role object is entirely mirror-derived. Third-party renderings of the RIPE database consistently describe it as a role object named DFINFRA, addressed at New-York-Ring 6, 22297 Hamburg, maintained under EDDI-MNT, created on 10 June 2021 and last modified on 27 October 2021, and serving as both the admin-c and tech-c of the aut-num (source, source). The authoritative first-party endpoint, the RIPE Database web lookup, returned only an application shell with no readable object attributes during the October 2026 research pass (source). Mirror agreement is a fact about mirrors, not about the registry; everything below inherits that limitation.

Why no named person is not the story

A natural reaction to a contact object that names nobody is to treat it as an accountability failure. RIPE's own documentation points the other way. A role object, the registry operator states, "should describe a business function or operational unit and may reference the individual people responsible for this activity", with references to person objects optional (source). Abuse handling is routed structurally, through the organisation object's abuse-c attribute pointing at a role object that must carry an abuse-mailbox (source), and the working-group record shows this design has been debated and refined over years (source).

So the design permits an anonymous, mailbox-bearing business-function contact. What the design does not answer is what happens when the mailbox-bearing handle outlives the organisation it was created for — and when the authoritative record of both becomes unreadable.

The legal person behind the handle changed

The org object ORG-EDG14-RIPE was, on every mirror rendering, created in June 2021 for EDEKA DIGITAL GmbH. That company no longer exists. German commercial-register mirrors record that EDEKA DIGITAL GmbH (Amtsgericht Hamburg HRB 113314, entered in 2010 as Lunar GmbH and renamed in December 2018) was absorbed by merger into EDEKA Verwaltungs- und Beteiligungs GmbH (HRB 90516, registered 2004, capital raised to €240,000 after an earlier 2018 merger), with the merger entry published on 5 August 2025 (source, source). The English-language register mirror shows the same 5 August 2025 entry and flags the transferring entity as defunct (source). A second register mirror independently lists HRB 113314 as deleted — "the company is no longer active" — while its own HRB 90516 copy is stale, reporting the last change as 6 June 2018 and noting that register announcements ceased in August 2022 (source, source).

Both entities share the same registered address: New-York-Ring 6, 22297 Hamburg — the same address the frozen role object carries. The group's public corporate imprint names EDEKA ZENTRALE Stiftung & Co. KG (HRA 96305) as publisher, with an executive board of Markus Mosa (chair), Peter Keitel and Mario Slunitschek, and does not mention HRB 90516 or the RIPE handle at all (source). The register, not the website, is what connects the network's contact layer to a surviving legal person.

What the mirrors say, and where they split

The routing picture bounds the operational stakes. AS210860 has announced zero prefixes since 26 March 2026: Hurricane Electric shows no visibility in the global table (source), RIPEstat's resource view is reported to show no originated prefixes (source), and CIDR Report classifies the system as "NOT Announced" under the name EDEKA_DIGITAL, DE (source). Prior BTW coverage documented this silence and the two-tier split in which the 1996 legacy block 193.20.0.0/15 is routed live by AS197909, a different EDEKA network (source).

Against that backdrop, the contact layer itself splits along one line: the org-name behind ORG-EDG14-RIPE. ip.cc renders the organisation as EDEKA DIGITAL GmbH with last-modified 27 October 2021 (source). Other renderings — one aggregator mapping the handle to EDEKA Verwaltungs- und Beteiligungs GmbH with the description "DE-EDEKA-19960717, EDEKA IT on-prem services" (source), and prior coverage attributing to IPIP.NET a rendering of the same handle with the post-merger name and a last-modified date of 13 May 2026 (source, source) — suggest a post-merger update that propagated to some mirrors and not others.

The 13 May 2026 date deserves explicit caution: no primary RIPE document inspected in this research pass confirms it, and it rests on a mirror snapshot whose capture time is unknown. It is reported here as a disputed mirror attribute, not as a verified registry update. The direction of travel, however, is independently supported by the register evidence: the surviving legal person behind the 2021-created handle is HRB 90516.

A third record points the same direction with its own defects. An IPv4 transfer aggregator records a "merger or acquisition" movement of one /24 from EDEKA DIGITAL GmbH (DE) to EDEKA Verwaltungs- und Beteiligungs GmbH, recorded 23 December 2025 via RIPE — after the register merger, and with an inconsistent destination country label (AT) that undercuts the record's reliability (source). It corroborates direction, not precision.

The finding: accountability now lives one layer down

Put the layers in order and the gap becomes the finding. The contact layer is frozen: role DA9499-RIPE, unchanged since 27 October 2021 on every mirror that renders it, naming no person, readable at its authoritative endpoint by nobody. The routing layer is silent: no announcements since 26 March 2026. The legal layer has moved: the entity named in the org object ceased to exist as a separate legal person in August 2025, absorbed into a holding company that shares its address.

Each layer is individually verifiable — the routing through independent observers, the merger through the register mirrors, the freeze through mirror dates — and none of them resolves the question the contact layer exists to answer: who answers the phone.

The evidence does resolve one thing, negatively and positively at once. No first-party registry source connects DA9499-RIPE to any accountable individual. But the register layer does connect the handle's address and its org object's history to a verifiable surviving entity: EDEKA Verwaltungs- und Beteiligungs GmbH, HRB 90516, New-York-Ring 6, 22297 Hamburg. Accountability, where it can be established at all, runs through corporate registration and shared address, not through the registry's contact design.

That is a structural observation about number-resource governance, not a claim about any party's conduct: the system performed as documented, and the documentation no longer reaches the reality it describes.

What would change the picture

Three observations would move this analysis materially. A readable authoritative lookup for DA9499-RIPE that confirms or contradicts the mirror consensus on name, dates and contact structure. A confirmed org-object update showing the post-merger name and its actual last-modified date, which would convert the 13 May 2026 mirror attribute from disputed inference to fact. And any routing change — a resumption of announcements by AS210860, or an update to the role object — which would show the contact layer re-engaging with the operational layer it has been divorced from since March 2026.

Until then, the accountable party for this network's registration is identifiable only through the commercial register.

Sources and verification boundaries

Every registry attribute in this article is mirror-derived; the authoritative RIPE Database endpoint could not be read during the October 2026 research pass, and register values come from third-party commercial mirrors rather than the Hamburg Handelsregister itself. The 13 May 2026 last-modified attribute is not independently verified. Direct sources consulted: