The African Network Information Centre (AFRINIC) is a non-profit, member-based Regional Internet Registry (RIR) serving Africa and the Indian Ocean region, entrusted with the allocation, management, and registration of Internet number resources, including IPv4 and IPv6 addresses and Autonomous System Numbers (ASNs), in accordance with community-developed policies.[1][2] Established as a formal RIR in April 2005 following ICANN accreditation, AFRINIC operates under the corporate laws of Mauritius, with its headquarters in Ebene City, and functions as one of five global RIRs responsible for regional distribution of these resources from the Internet Assigned Numbers Authority (IANA).[3][4]AFRINIC's foundational role supports the growth and sustainability of Africa's Internet infrastructure by ensuring fair and efficient resource distribution to local Internet registries, ISPs, and end-users, while promoting IPv6 adoption and cybersecurity measures like Resource Public Key Infrastructure (RPKI).[5][6] However, the organization has been defined by persistent governance challenges since the early 2010s, including allegations of internal corruption leading to improper IP allocations, financial mismanagement, and repeated disruptions in board elections—such as the annulment of its 2025 election due to proxy disputes and fraud claims—which have eroded stakeholder trust and prompted ICANN warnings of a deepening crisis.[7][8][9]These issues have culminated in operational instability, with AFRINIC lacking a legitimate board since 2022, ongoing legal battles in Mauritian courts, and proposals from community stakeholders for its potential dissolution or restructuring to restore credibility in managing scarce IPv4 resources amid Africa's digital expansion.[10][11] Despite such turmoil, AFRINIC continues to fulfill core functions under interim governance, underscoring the tension between its critical technical mandate and institutional frailties in a resource-constrained environment.[12]
Mandate and Operations
Service Region and Core Responsibilities
AFRINIC operates as the Regional Internet Registry (RIR) designated for Africa, encompassing the entire African continent—comprising 53 sovereign states recognized by the African Union—and extending to territories in the Indian Ocean, including islands such as Madagascar, Mauritius, Réunion, and the Comoros.[13] This service region is subdivided into six operational sub-regions to facilitate targeted coordination and resource management: North, West A, West B, Central, East, and Southern Africa.[13] The delineation aligns with the global framework established by the Internet Assigned Numbers Authority (IANA), which delegates management of specific portions of the IPv4, IPv6, and Autonomous System Number (ASN) spaces to the five RIRs, with AFRINIC receiving allocations from IANA for distribution within its area.[4]The core responsibilities of AFRINIC center on the equitable allocation, assignment, and registration of Internet number resources to eligible organizations, including local Internet registries, ISPs, and end users, strictly adhering to policies developed by its multistakeholder community.[1] This includes sub-allocating blocks of IPv4 and IPv6 addresses as well as ASNs from its IANA-delegated pools, ensuring efficient utilization to support network growth and prevent exhaustion, particularly amid IPv4 scarcity.[5] AFRINIC maintains the authoritative registry for these resources, providing services such as WHOIS lookups to enable verification of ownership and routing information, while enforcing compliance through audits and recovery mechanisms for unused or fraudulently obtained allocations.[14]Beyond resource distribution, AFRINIC promotes technical standards and security practices, such as IPv6 adoption and Resource Public Key Infrastructure (RPKI) deployment, to enhance routing integrity across African networks.[5] It also supports capacity building through training programs, fellowships, and knowledge dissemination aimed at bolstering local expertise in Internet operations and governance, thereby fostering self-reliance in the region.[1] These functions are executed under a nonprofit mandate, with operational funding derived primarily from member fees scaled by resource holdings, ensuring sustainability without reliance on external subsidies.[4]
Internet Number Resource Management
AFRINIC manages the allocation and assignment of Internet number resources—IPv4 and IPv6 addresses, as well as Autonomous System Numbers (ASNs)—to organizations within its service region, ensuring equitable distribution based on demonstrated technical and operational needs.[15] These activities are governed by the Consolidated Policy Manual (CPM, version 1.6), which outlines criteria including membership status, utilization justification, and regional presence requirements.[16] Allocations prioritize efficient use, with applicants required to submit detailed network plans, evidence of infrastructure deployment, and projections covering at least 12-24 months of usage.[17]For IPv4 resources, AFRINIC applies a minimum initial allocation size of /22 (1,024 addresses) to Local Internet Registries (LIRs), which must demonstrate 25% immediate utilization and plan for 50% within one year, alongside 80% prior space usage for subsequent requests.[17] End users receive minimum /24 assignments (256 addresses).[17] Following IPv4 pool exhaustion entry into Phase 1 on March 31, 2017, a "soft landing" policy limits maximum allocations to /22 while enforcing stricter scrutiny, including audits and mandatory WHOIS registration to prevent hoarding.[18][19]IPv6 allocations commence with a /32 prefix for LIRs, requiring plans to assign at least 75% as /48 end-site prefixes within 12 months and public announcement of the aggregated block.[20] Additional space is granted based on HD-Ratio utilization thresholds (0.94), promoting rapid deployment amid abundant supply.[21] ASNs, serving as unique identifiers for routing domains, are assigned singly to entities demonstrating multi-homing to multiple upstream providers or distinct routing policies, with mandatory WHOIS registration and reclamation of unused numbers.[22]To maintain resource efficiency, AFRINIC performs periodic reviews of holders' utilization, reclaiming underused allocations and enforcing compliance through verification processes.[23] These measures address scarcity, particularly for IPv4, while facilitating growth in IPv6 adoption across the region.[16]
WHOIS Database and Lookup Services
The AFRINIC WHOIS Database serves as the official public repository for registration data on Internet number resources allocated or assigned within its service region, including IPv4 and IPv6 address blocks, Autonomous System (AS) numbers, associated organizations, and routing policies.[24][25] It operates on a version of the RIPE NCCWHOIS database software (version 3.0), enabling queries for resource holders, contact details, and reverse DNS delegations to support network operations and policy enforcement.[26] The database ensures that all objects are protected by maintainer records, which authenticate updates and prevent unauthorized modifications, as verified in a 2021 comprehensive audit conducted by ARIN that identified no unprotected objects.[27]Lookup services for the AFRINIC WHOIS Database are accessible through multiple interfaces to facilitate verification of resource ownership and routing information. The primary web-based query tool is available at the AFRINIC website, allowing users to search by IP address, AS number, or organization name via a simple form interface.[28] Command-line access is supported using standard WHOIS clients on Linux and macOS, querying the server at whois.afrinic.net, while Windows users can employ tools like SysinternalsWHOIS.[29] Email-based queries are also permitted by sending requests to [email protected], adhering to terms that prohibit bulk data extraction and limit use to legitimate purposes such as routingpolicy evaluation or inter-operator coordination.[29][30]Resource holders, primarily AFRINIC members, maintain their database entries through the MyAFRINIC member portal, where they can update contact details, submit route objects for BGP announcements, and manage maintainer passwords for hierarchical object control.[29][31] Organization objects are centrally managed by AFRINIC staff to ensure consistency, with changes requiring authentication via PGP keys or passwords associated with maintainers.[25] These services align with AFRINIC's policies under the Consolidated Policy Manual, which mandate accurate registration data to prevent fraud and support resource recovery efforts, though enforcement relies on member compliance and periodic audits.[32][27]
DNS Services and Routing Security
AFRINIC manages reverse DNS (rDNS) zones for IPv4 address blocks 41.in-addr.arpa and 196.in-addr.arpa, as well as IPv6 delegations under 2c00::/12 in ip6.arpa, enabling members to delegate authoritative name servers for their allocated or assigned resources.[33] This service supports pointer (PTR) records essential for email deliverability and network troubleshooting, as outlined in RFC 1033 and RFC 3152.[34] Through the African DNS Support Programme (AfDSP), launched in 2020, AFRINIC assists members in deploying and maintaining DNS infrastructure, including training on zone configuration and anycast deployment to enhance resilience.[34]To bolster DNS integrity, AFRINIC operates a DNSSEC service that signs its rDNS zones, enabling cryptographic validation of responses to prevent spoofing and cache poisoning.[35] Members can publish Delegation Signer (DS) records via AFRINIC's portal to extend the chain of trust to their sub-delegations, with deployment plans emphasizing operational testing and key management as of October 2025.[36] Additionally, AFRINIC hosts anycast instances of root name servers, including copies of K.root-servers.net and L.root-servers.net under the African Root Server Copy (AfRSCP) initiative, reducing latency for African users and supporting local DNS resilience since at least 2017.[37]In routing security, AFRINIC promotes the Resource Public Key Infrastructure (RPKI) framework to mitigate BGP hijacking by certifying the authorization of IP prefixes and AS numbers via Route Origin Authorizations (ROAs).[38] Launched as a core service by March 2023, RPKI enables holders to issue digitally signed ROAs through AFRINIC's portal, allowing relying parties—such as ISPs—to validate announcements against a trust anchor rooted in AFRINIC's certificates.[39] As of 2024, adoption focuses on validating ROAs from trusted anchors, with validators caching and distributing origin validation states to routers for prefix filtering, though global coverage in AFRINIC-allocated space remains partial at around 3% validated prefixes per snapshot analyses.[40] Complementary efforts include InternetRouting Registry (IRR) integration for policy modeling, offered via training to address BGP vulnerabilities like prefix leaks.[41]
Capacity Building and Partnerships
AFRINIC's capacity building initiatives focus on enhancing technical expertise among African Internet professionals through structured training programs, workshops, and educational resources. The organization's Capacity Building program delivers validated knowledge on topics such as IPv6 deployment, Internet number resource management (INRM), DNSSEC, and Resource Public Key Infrastructure (RPKI), targeting network engineers and operators across the service region.[2][42] Between 2017 and 2018, AFRINIC conducted workshops in 21 African countries, training over 700 engineers and managers.[43] These efforts extend to online platforms like the IP Academy, which offers cohort-based courses for IPv6 project leadership and global certification.[44]Key programs include the Internet Development Programs (IDPs), which promote secure Internet growth via fellowships, governance schools, and community development activities.[45] The Fellowship Programme enables younger participants to engage with experts and access emerging trends in Internet governance and ICT.[45] Additionally, the African Internet Governance School provides specialized training for individuals and organizations, while the Technical Community Development Program collaborates on skill-enhancing workshops.[46][47] The Fund for Internet Research and Education (FIRE), launched to support ICT initiatives, funds projects under categories like training, measurement, and security as of October 2025.[48] Webinar series further disseminate best practices and industry updates.[49]AFRINIC fosters partnerships with regional and international entities to amplify these efforts and advance Internetinfrastructure. Collaborations include joint training with hosts for multi-day workshops on core technologies.[50] The organization partners with the Internet Society on initiatives like the 2020 Africa Internet Measurements Collaboration, aimed at continent-wide data strengthening under a long-term agreement.[51]Research Collaborations (ARC) engage African institutions for technical and policy studies on resource distribution and security.[52] AFRINIC also works with diverse organizations, including ICANN and regional bodies, to integrate expertise for technology adoption, while the Research Collaboration Program supports operator-informed decision-making.[53][54] These alliances prioritize sustainable, community-driven growth amid Africa's digital expansion.[55]
Policy Development
Community Policy Development Process
The AFRINIC Policy Development Process (PDP) enables the open, bottom-up development of policies governing the distribution and management of Internet number resources within its service region. Policies emerge from community consensus rather than top-down directives, with AFRINIC staff implementing approved proposals without alteration.[56] This process applies exclusively to resource management policies and excludes bylaws or operational procedures.[56]Guided by three core principles, the PDP ensures openness, allowing participation by any interested individual without membership or qualification requirements; transparency, through public documentation of all actions and discussions on the AFRINIC website and mailing lists; and fairness, promoting equitable resource allocation and timely resolution of proposals.[56] The Policy Development Working Group (PDWG), an informal body comprising all participants, facilitates discussions via the public [email protected]mailing list and bi-annual Public Policy Meetings (PPMs).[56] Two PDWG Chairs, elected by the community for two-year terms during PPMs, oversee the process, assess consensus, and recommend proposals to the AFRINIC Board of Directors.[56]Proposals may be submitted by any community member via email to [email protected], including a problem statement, proposed solution, and rationale; AFRINIC provides templates and support upon request.[56] Upon receipt, Chairs acknowledge submission within two weeks and publish it as a draft policy on the AFRINIC website and mailing list for initial discussion, lasting at least four weeks.[56] Authors may revise drafts based on feedback, with versions tracked publicly; drafts expire after one year without advancement unless extended by Chairs with community justification.[56] PPMs, held twice yearly, include dedicated PDWG sessions where Chairs present drafts, facilitate debate, and gauge rough consensus—defined as broad agreement without sustained opposition, rather than a formal vote.[56]Following a PPM, Chairs may call for a Last Call period of at least two weeks for final review and objections.[56] If rough consensus is determined, the proposal advances to the Board for ratification, typically within one month; the Board approves, rejects with reasons, or returns for refinement, but cannot modify content.[56] Approved policies are implemented within six months, unless the Board waives this for cause.[56] In emergencies affecting resource management, Chairs may expedite with a minimum four-week review and documented consensus.[56]Disputes over Chair decisions, such as consensus calls or procedural adherence, trigger an appeals mechanism: appeals must be filed within two weeks, supported by at least three PDWG members, and reviewed by an independent Appeal Committee of three elders appointed by the Chairs.[56] The Committee's binding decision focuses on process integrity, not policy merits.[56] All PDP documentation, including minutes, archives, and rationales, remains publicly accessible to uphold transparency.[56]
Notable Policies on Resource Allocation and Recovery
AFRINIC's IPv4 Soft Landing Policy governs the allocation of remaining IPv4 addresses following the exhaustion of the free pool, aiming to extend availability through conservation measures. Adopted to align with global post-exhaustion practices, the policy structures allocations into two phases: Phase One, initiated on 31 March 2017, permits initial requests up to a /13 block (approximately 500,000 addresses) for qualifying local internet registries (LIRs) or end-users demonstrating need, with subsequent allocations capped at sizes justified by 80% utilization of prior holdings. Phase Two, entered on 13 January 2020 after the Phase One pool depletion, limits new allocations to a maximum /22 (1,024 addresses), implements an 8-month justification period, and prioritizes a waiting list for excess demand while reserving a /12 block (over 1 million addresses) for critical unforeseen needs, such as national infrastructure.[16][57]In contrast, IPv6 allocation policies emphasize abundance and hierarchical efficiency, with initial allocations to LIRs starting at /32 based on demonstrated addressing plans covering at least 80% of HD-ratio utilization over time, and subsequent additions requiring similar justification without exhaustion constraints.[16]The Internet Number Resources Audit Policy, ratified to enforce the Registry Services Agreement's utilization requirements, authorizes AFRINIC to perform periodic audits of IP addresses, AS numbers, and related resources held by members. Audits are categorized as random (targeting larger holders), selected (prompted by internal flags like routing anomalies), or complaint-driven, verifying compliance with original allocation criteria such as announced routes and non-hoarding. Non-compliance triggers notification and a remediation window; unresolved cases lead to a three-month public notice of impending recovery, followed by reclamation and reallocation of the resources per standard policies, with appeals available via arbitration. This mechanism has supported recovery efforts amid IPv4 scarcity, though implementation has faced legal challenges in specific disputes.[58][16]Additionally, the IPv4 transfer policy facilitates intra-regional and inter-RIR transfers under strict conditions, requiring recipient justification, a 12-month cooldown for sellers, and preservation of aggregation, serving as a controlled recovery alternative to direct reclamation.[16]
Organizational Structure
Membership and Eligibility
AFRINIC categorizes its membership into Resource Members, Associate Members, and Registered Members, with Resource Members further subdivided into Local Internet Registries (LIRs) and End Users.[59] Resource Members are legal entities or individuals eligible for allocations or assignments of Internet number resources, including IPv4 addresses, IPv6 prefixes, and Autonomous System Numbers (ASNs), subject to compliance with AFRINIC's service policies.[59][60] Eligibility requires operations within AFRINIC's service region, defined as the African continent and Indian Ocean islands across six sub-regions: Northern, Western, Central, Southern, and Eastern Africa, plus the Indian Ocean.[59]To join as a Resource Member, applicants must complete an online registration via the New Membership Registration Portal, providing organizational documents, contact verification, and a proposed justification for resource needs.[60] The process involves preliminary administrative checks by Customer Services (typically 2 days), detailed evaluation by the Registration Services team (up to 4 days) to assess compliance with resource policies, issuance of an invoice (payable within 45 days), execution of a Registration Services Agreement (RSA), and final resource provisioning upon payment confirmation (additional 2-4 days).[60] LIRs, often Internet Service Providers, must demonstrate capacity to sub-allocate or assign resources to end users, while End Users—such as banks, universities, or enterprises—require evidence of direct internal use through detailed plans justifying at least a /23 IPv4 block or equivalent within specified timelines (e.g., 8 months for certain requests).[60] As of July 2024, AFRINIC reported 1,277 LIRs and 580 End Users.[59]Associate Membership is available to individuals or legally established entities, including public sector, governmental, intergovernmental, and non-governmental organizations, that exhibit substantial interest in Internet number resource management but do not seek or hold assigned resources.[61][59] Eligible applicants submit an online form with identification or company registration documents and an Associate Membership Agreement; applications are evaluated within 15 working days, followed by invoicing and payment to confirm status.[61] Associate Members receive notices for Annual General Meetings, observer attendance rights, and access to training, consultancy, and technical expertise, without needing an RSA.[61]Registered Members are limited to directors appointed in accordance with the Mauritius Companies Act 2001, serving AFRINIC's incorporation requirements as a Mauritian non-profit entity.[59] Overall eligibility across categories aligns with AFRINIC's bylaws and resource management policies, emphasizing verifiable operational presence and adherence to global Internet standards coordinated via the Internet Assigned Numbers Authority (IANA).[59]
Board of Directors
The Board of Directors of AFRINIC oversees the organization's strategic direction, policy implementation, resource allocation decisions, budgeting, and staffing, as outlined in the bylaws. Directors are elected by eligible members through a process managed by an independent elections committee, with representation allocated across six sub-regions: Northern Africa, Western Africa, Central Africa, Eastern Africa, Southern Africa, and the Indian Ocean region. Each director serves a three-year term, renewable once, and must meet criteria including residency in their sub-region and relevant expertise in Internet governance or technology. The board typically comprises these six elected members, supplemented by up to two appointed experts for specialized skills and the CEO as a non-voting ex-officio member.[62][63]After prolonged governance disputes, including court-ordered receivership and failed prior elections, AFRINIC conducted board elections from September 10 to 12, 2025, filling all regional seats via online voting by verified members. Results were announced on September 15, 2025, marking the first full board election since 2019. On October 3, 2025, the board appointed Emmanuel Adewale Adedokun as Chairman and Abdelaziz Hilali as Vice-Chairman to lead post-election stabilization efforts.[64][65][66]The current regional directors, effective from the 2025 election, are:
(Elected; specific name pending official confirmation post-election)
-
Non-regional seats remain subject to board appointment for expertise, with no public updates as of October 2025. The board operates through standing committees, including Audit, Finance, and Remuneration, to handle specialized oversight.[69]
Council of Elders
The AFRINIC Council of Elders serves as a non-executive advisory committee to the Board of Directors, drawing on the expertise of former leaders to offer strategic guidance.[70] Comprising up to six individuals, it is limited to past chairpersons who have served at least one full term on the Board and subsequently departed.[71] Appointments are made by the Board on a first-in, first-out basis to enforce the numerical cap, with members ineligible for reappointment upon tenure completion.[72]Established under Section 16 of the AFRINIC Bylaws, adopted in January 2013, the Council's duties focus on providing assistance to the Board Chair or the full Board on matters as outlined in agreed terms of reference, without statutory decision-making authority.[71][72] This advisory function supports AFRINIC's governance model, emphasizing experience from early organizational history amid the registry's evolution in Internet number resource management.[70]As of February 2023, the Council included:
Dr. Nii N. Quaynor, who chaired from 2001 to 2004;
Pierre S. Dandjinou, chair from 2004 to 2008;
Dr. Viv Padayatchy, chair from 2008 to 2011;
Maimouna Ndeye Diop Diagne, chair from 2011 to 2012;
Dr. Christian Domilongo Bope, chair from 2018 to 2020.[71]
Executive Leadership and Staff
AFRINIC has operated without a Chief Executive Officer since November 2022, when the contract of previous CEO Eddy Kayihura expired amid protracted governance crises that precluded board approval for renewal or a successor appointment.[73] In the interim, executive functions have been decentralized to department heads and specialized staff, with overarching supervision provided by the reconstituted Board of Directors—elected on September 12, 2025—and court-appointed Receiver Gowtamsingh Dabee, whose role, established in February 2025, includes stabilizing operations, conducting elections, and aiding transitional governance.[74][75] As of October 2025, the Board and Receiver are collaborating on recruiting a new CEO as a priority for restoring centralized leadership.[74]The CEO's Office supports core administrative and legal functions through key personnel, including Legal AdvisorAshok Radhakisoon, Senior Executive Assistant Guylaine Laiyra, and Legal Officer Kishna Dhondee. Additional senior roles within this office handle resource management and transformation initiatives, such as Senior IP Resources Specialist Madhvi Gokool and Project Manager and Transformation LeadMusa Stephen Honlue.[76]Executive responsibilities extend to heads of operational departments, who manage daily activities in resource allocation, member services, infrastructure, and capacity building:
These leaders oversee teams totaling over 30 staff members across technical, administrative, and support roles, ensuring continuity in IP address management and related services despite the leadership vacuum.[76] Staff retention has been challenged by the organization's instability, including frozen financial accounts and legal proceedings, yet core operations persist under this distributed model.[77]
Historical Timeline
Formation and Early Operations (2005–2016)
AFRINIC's formation stemmed from efforts by early African Internet pioneers, including Nii Quaynor, to establish a dedicated regional internet registry for the continent. The initiative began in 1997 during an INET workshop in Malaysia, where African participants proposed creating an African RIR to manage IP address allocations independently from global bodies. A steering committee was subsequently formed, leading to the establishment of the African Network Operators Group (AfNOG) in 2000 to foster technical coordination. By 2001, an initial board of trustees was convened, chaired by Dr. Nii Quaynor, with representation from African sub-regions to guide the organization's development.[3]Incorporation occurred in Mauritius on October 11, 2004, as a non-profit entity with a board structure drawing from six sub-regions: Northern, Western, Central, Eastern, Indian Ocean, and Southern Africa. Operations were initially dispersed, with technical functions in South Africa, backup and disaster recovery in Egypt, and training activities in Ghana. Provisional recognition from ICANN followed in late 2004, enabling AFRINIC to become fully operational by February 2005. Full accreditation as the fifth Regional Internet Registry (RIR) was granted by ICANN on April 8, 2005, under the criteria outlined in ICANN's ICP-2 document, formalizing its authority over Internet number resources for Africa, the Indian Ocean, and parts of the Middle East.[3][78]Early operations focused on resource allocation, policy formulation through community-driven public meetings, and capacity building. AFRINIC began distributing IPv4 addresses, IPv6 allocations, and Autonomous System Numbers (ASNs) to local Internet registries and end users across its service region, which encompasses over 70 countries and territories. The first policy development meetings commenced in 2005, including a joint event with IPv6 discussions in Cairo in December, emphasizing bottom-up consensus on resource management. By signing a memorandum of understanding with the Number Resource Organization (NRO) post-incorporation, AFRINIC integrated into the global RIR framework, appointing observers to the Address Supporting Organization Address Council (ASO AC). Through 2016, it expanded membership, conducted training via AfNOG collaborations, and promoted IPv6 adoption amid growing Internet penetration in Africa, transitioning from interim hosting of functions to independent stewardship.[3][79][80]
IPv4 Exhaustion and Conservation Efforts (2017–2019)
In early 2017, AFRINIC's available IPv4 address pool dwindled to the equivalent of approximately 1.03 /8 blocks, signaling the imminent depletion of its free resources and the onset of managed exhaustion procedures.[81] On January 16, 2017, the organization announced its approach to Phase 1 of the IPv4 Soft Landing policy, a community-developed framework designed to allocate remaining space from the final IANA-allocated /8 block (102/8) while prioritizing conservation and transition to IPv6.[82] This policy, ratified through AFRINIC's Policy Development Process, restricted maximum allocations to a /13 block per request during Phase 1, required demonstrated 90% utilization of prior assignments for eligibility, and implemented first-come, first-served processing with weekly approvals to curb hoarding and ensure equitable distribution amid growing demand in Africa's expanding internetinfrastructure.[18]Phase 1 formally commenced on March 31, 2017, after AFRINIC approved an IPv4 request exceeding its non-reserved pool, marking it as the last Regional Internet Registry to enter post-exhaustion management of its final /8.[18] Under this regime, allocations continued but with stringent justification requirements, including detailed network plans and utilization audits, to extend the usability of scarce IPv4 resources and incentivize IPv6 deployment among members.[83] AFRINIC supplemented these measures with outreach efforts, including workshops and reports emphasizing IPv6 readiness, as Africa's IPv6 adoption lagged behind global averages, with penetration rates below 20% in many countries by mid-2017, underscoring the policy's role in bridging connectivity gaps without over-reliance on legacy IPv4.[18]By 2018, AFRINIC maintained Phase 1 operations, processing requests conservatively while monitoring pool depletion; the final /8 yielded smaller blocks to end-users and local internet registries, with no expansions to the pool via reclamation or transfers during this period.[18] Policy discussions in community meetings, such as AFRINIC-26 in 2018, reinforced conservation by rejecting proposals for unrestricted inter-RIR transfers, prioritizing internal stewardship over market-driven outflows. Approaching further scarcity, on August 19, 2019, AFRINIC signaled the nearing of Phase 2, where maximum allocations would shrink to /22 and minimums to /24 upon reaching a /11threshold in the final /8, further tightening supply to sustain operations into the 2020s and accelerate IPv6 migration.[18] These phased restrictions, grounded in empirical tracking of AFRINIC's 2% share of global IPv4 space, aimed to prevent abrupt cutoff while fostering long-term efficiency in resource management.[84]
Initial Internal Scandals (2018–2019)
In March 2018, AFRINIC faced allegations of sexual harassment and bullying when Vymala Poligadu, the organization's head of external relations, filed a formal complaint against Chairman Sunday Folayan, Vice-Chairman Hytham El-Nakhal, and Finance Director Patrisse Deesse.[85][86] Poligadu claimed repeated unwanted propositions and subsequent retaliation, supported by text message evidence, prompting the board to commission an independent review that was completed but not publicly released.[85] The incident fueled internal discontent, culminating in a May 2018 protest vote during board elections where "none of the above" options secured three seats, highlighting governance fractures and leading to operational delays.[86]Concurrent with these issues, concerns over IPv4 address mismanagement surfaced in September 2018, involving irregularities in resource allocations traced to internal staff actions.[86] Investigations revealed that Ernest Byaruhanga, a founding policy coordinator, had allegedly facilitated the redirection and sale of IP blocks—totaling tens of thousands of addresses with an estimated market value exceeding $50 million—through shell entities such as Amiek Holdings and IPv4 Holdings, by altering registry records for defunct African organizations.[87][86] Prior warnings of suspicious activity dating back to 2016 were reportedly downplayed by then-CEO Alan Barrett and Chairman Folayan, delaying remedial action until external scrutiny intensified.[87]Byaruhanga resigned in October 2019 amid the probe, which the board had initiated earlier that year, with a full report anticipated by December.[87][86] These revelations prompted the resignation of external auditors and underscored systemic oversight failures in tracking allocations, eroding trust in AFRINIC's resource stewardship during a period of global IPv4 scarcity.[87] The scandals exacerbated linguistic and regional tensions within the organization, contributing to leadership instability as Barrett departed in July 2019 after a routine resignation announced in April, paving the way for interim arrangements.[88][86]
Onset of Legal Conflicts with Cloud Innovation (2020–2021)
In 2020, AFRINIC conducted an internal audit of its WHOIS database, identifying potential misuse of Internet number resources allocated to members, including Cloud Innovation Ltd., a Seychelles-registered entity led by CEO Lu Heng.[89] The audit revealed that approximately 6.2 million IPv4 addresses, assigned to Cloud Innovation in four blocks between 2013 and 2016 under AFRINIC's Registration Service Agreement (RSA), were primarily routed and utilized outside the African service region, such as in Hong Kong and the United States, contravening RSA clauses mandating intra-regional deployment for End User assignments.[89][90] AFRINIC viewed this as a breach of its service policies, which prioritize resource conservation amid IPv4 exhaustion in Africa, prompting demands for documentation justifying the allocations.[91]On June 23, 2020, AFRINIC formally notified Cloud Innovation of the alleged violations, requesting a response within 14 days and threatening recovery of the resources if unresolved.[91][90] Cloud Innovation replied on July 13, 2020, denying the claims and arguing that pre-2017 allocations were not subject to stricter regional-use restrictions later formalized in AFRINIC's policies.[90] The matter remained unresolved for eight months, during which AFRINIC gathered further evidence of non-compliance, including traceroute data showing extraterritorial usage.[89]Escalation occurred on March 10, 2021, when AFRINIC issued a 30-day notice to cure the breaches or face RSA termination, citing ongoing failure to demonstrate legitimate African-based operations.[91][90] Cloud Innovation preemptively sought judicial intervention, filing for an interim injunction on March 24, 2021, in the Supreme Court of Mauritius (AFRINIC's host jurisdiction); the court granted relief on April 7, 2021, barring AFRINIC from reclaiming the addresses pending full hearings.[91][90] AFRINIC successfully challenged this order on July 7, 2021, due to procedural issues tied to COVID-19 lockdowns, leading to termination of Cloud Innovation's RSA on July 8, 2021, with a 90-day grace period for resource recovery.[91]Cloud Innovation promptly refiled suit on July 13, 2021, securing another Supreme Court interim order restraining AFRINIC from membership termination or resource revocation, and later that month, the court froze up to $50 million in AFRINIC's bank accounts over Cloud Innovation's claim of $1.8 billion in reputational damages.[90] These early rulings highlighted jurisdictional tensions, with Cloud Innovation framing the dispute as a contractual overreach by AFRINIC, while the registry emphasized enforcement of global RIR standards to prevent resource hoarding amid Africa's IPv4 scarcity.[89] The asset freeze threatened AFRINIC's operational liquidity, prompting support from other RIRs via a stability fund exceeding $2 million.[89] By late 2021, the conflict had spawned over a dozen parallel cases, marking the onset of protracted litigation that exposed governance vulnerabilities in resource stewardship.[91]
Board Dissolution and Court Receivership (2022–2023)
In 2022, the Supreme Court of Mauritius dissolved the AFRINIC Board of Directors after determining that it lacked the necessary quorum and lawful authority to function, amid escalating internal governance disputes and litigation initiated by members including Cloud Innovation Ltd.[92][93] This ruling stemmed from prior legal challenges that had invalidated board actions and depleted its effective membership, leaving AFRINIC without operational leadership and prompting calls for judicial intervention to stabilize the organization.[94] The dissolution effectively paralyzed decision-making, as AFRINIC's bylaws required a quorum for board meetings, and ongoing lawsuits had frozen assets and restricted resource allocations.Following the board's dissolution, AFRINIC faced mounting financial pressures, including unpaid legal fees and halted operations, which Cloud Innovation Ltd.—a Seychelles-based entity and AFRINIC member—attributed to mismanagement and insolvency risks.[94] In March 2023, Cloud Innovation filed case SC/COM/MOT/000156/2023 in the Supreme Court of Mauritius, seeking the appointment of a receiver to oversee assets and prevent further deterioration.[95] The petition highlighted AFRINIC's inability to meet obligations without directors, building on earlier judgments that had voided board legitimacy.On 12 September 2023, the Supreme Court (Commercial/Bankruptcy Division) granted the receivership application, placing AFRINIC under the control of a court-appointed Official Receiver due to the absence of directors effective 18 September 2023.[11][96] The receiver's mandate included maintaining the status quo, safeguarding IP resources and financial assets, and facilitating elections for a new board, with powers explicitly outlined in the court's order to manage day-to-day operations amid insolvency proceedings.[95] An appeal by AFRINIC against this order, filed on 28 September 2023 (SCR No. 1808 6B/65/2023), was later dismissed, solidifying the receivership arrangement.[95] This phase marked a shift to judicial oversight, as AFRINIC's internal mechanisms proved inadequate against protracted member disputes.
Failed Election Attempts and Governance Stalemate (2023–Mid-2025)
Following the Supreme Court of Mauritius's order on September 12, 2023, designating AFRINIC as a "declared company" and appointing a receiver-manager, the primary mandate was to stabilize operations, resolve outstanding litigation, and facilitate elections to reconstitute the Board of Directors, which had been dissolved earlier that year.[96] An appeal against this receivership was dismissed on October 15, 2024, extending the interim governance structure amid unresolved disputes over resource allocations and membership eligibility.[96] This period marked a prolonged stalemate, as the receiver's efforts to verify voter rolls and conduct elections were repeatedly obstructed by legal challenges, including injunctions from parties like Cloud Innovation Ltd., which contested proxy voting mechanisms and alleged irregularities in membership databases.[97][98]Throughout 2023 and 2024, no board elections materialized due to these entanglements, leaving AFRINIC reliant on the receiver for decision-making while core functions like IP address allocations continued under constrained authority.[94] Ongoing court proceedings, particularly those initiated by Cloud Innovation over disputed IPv4 resource recoveries, prioritized judicial oversight and froze electoral processes, as bylaws required resolution of such conflicts before proceeding.[11] The receiver's reports highlighted systemic issues, including unverified memberships and proxy abuses, which undermined confidence in any potential vote; for instance, thousands of legacy members lacked biometric verification, complicating eligibility under updated policies.[98] This governance vacuum drew criticism from stakeholders, with ICANN expressing concerns in mid-2025 that the protracted receivership eroded AFRINIC's operational legitimacy as a Regional Internet Registry.[99]Into early 2025, preparations for elections intensified under the receiver's direction, including nomination calls and voter onboarding, but inherited disputes persisted.[100] By June 2025, an attempted board election on June 23 was abruptly annulled by election officials citing "serious irregularities" in proxy voting, including disputes over a single contested proxy that purportedly invalidated broader results, without detailed public explanation.[77][101] This failure, breaching aspects of AFRINIC's bylaws on vote finality, prompted immediate backlash: ICANN issued a formal notice on June 25 demanding clarification within 24 hours, warning of potential derecognition, while members decried the decision as arbitrary and emblematic of entrenched manipulation.[102][9] The annulment extended the stalemate through mid-2025, with operations limping under receivership amid calls from litigants like Cloud Innovation for outright dissolution, arguing that repeated electoral breakdowns demonstrated irreversible governance collapse.[97] By July 2025, the crisis had stalled resource management and heightened risks to Africa's IP ecosystem, as external bodies questioned the receiver's capacity to enforce credible processes.[99]
September 2025 Board Election and Immediate Aftermath
The AFRINIC Board of Directors election for 2025 occurred via online voting from September 10 to 12, marking the organization's first successful board selection since 2022 amid prolonged governance disputes.[66] Approximately 500 members participated out of 2,430 eligible voters, with results announced on September 15 by the chair of the 2025 Nomination Committee.[64][66] The elected directors, representing regional and independent seats, include Abdelaziz Hilali (North Africa, Seat 1), Adewale Adedokun Emmanuel (West Africa, Seat 2), Kaleem Ahmed Usmani (Indian Ocean, Seat 3), Laurent Ntumba Kayemba (Central Africa, Seat 4), Carla Sanderson (Southern Africa, Seat 5), Dr. Fiona Asonga (East Africa, Seat 6), Ben Roberts (Non-regional/Independent 2, Seat 7), and Adewole Adewole David Ajao (Non-regional/Independent 1, Seat 8).[66]Seven of the eight elected members had been endorsed by Smart Africa, a continental body representing 40 African nations, which subsequently welcomed the results on September 13 and pledged support for collaborative reforms to enhance transparency and operational stability.[103][77] The new board was tasked with immediate priorities such as appointing a CEO, resolving frozen bank accounts, resuming IP resource allocations, and addressing policy backlogs to mitigate years of disrupted services.[66][77]However, the election's legitimacy faced swift challenges from stakeholders, who argued it violated AFRINIC bylaws and Mauritius Companies Act requirements, including irregularities in voting rights verification, proxy authorizations, and ballot processes.[104] Critics, citing independent observer reports, contended that the September vote failed to rectify procedural flaws from an annulled June 2025 election and urged the international community, including ICANN, to withhold recognition pending court-supervised review.[104][77] Ongoing Mauritian government investigations into the June process and broader criminal probes into alleged irregularities compounded doubts, with some advocating reinstatement of June candidates to safeguard governance integrity.[77] These disputes risked further delaying resolutions to outstanding litigation, such as the Cloud Innovation case, potentially prolonging AFRINIC's operational constraints.[77]
Major Controversies and Criticisms
Allegations of Resource Misallocation and Theft
In late 2019, reports emerged of systematic theft of IPv4 address blocks from AFRINIC's resource pool, valued at approximately $50 million USD, involving manipulation of the organization's WHOIS database by an insider.[87] An internal investigation by AFRINIC identified a former employee who had misappropriated IP number resources, reclassifying over 2.3 million IPv4 addresses as "legacy" space—free from standard allocation policies—to facilitate unauthorized transfers and sales on the black market.[105][106] This scheme exploited AFRINIC's procedures for handling legacy resources, which are historical allocations predating regional registries, allowing the stolen blocks to be assigned to entities outside legitimate oversight.[107]A comprehensive audit of AFRINIC's WHOIS database, completed in January 2021, confirmed misappropriation of at least 4.1 million IPv4 addresses from the organization's pool, with evidence of fraudulent registrations and transfers dating back to 2018.[108][109] The audit traced irregularities to internal actors who approved allocations without proper justification, including to shell companies lacking verifiable African operations, contravening AFRINIC's policies requiring resources serve the African region's needs.[86] By February 2021, AFRINIC had reclaimed about 1.06 million of these addresses through recovery efforts, but thousands remained in unauthorized hands, prompting ongoing monitoring and legal actions.[110]These incidents fueled broader accusations of governance lapses enabling resource leakage, with critics pointing to lax verification processes and insufficient audits prior to IPv4 scarcity pressures in 2017–2019.[7] While AFRINIC's leadership attributed the theft to isolated rogue actions, the scale—equivalent to a significant portion of Africa's remaining IPv4 inventory—raised questions about systemic vulnerabilities in resource stewardship, independent of later disputes with members like Cloud Innovation over contractual compliance.[111] No criminal convictions were publicly detailed by mid-2025, though the events contributed to eroded trust and calls for enhanced transparency in IP management.[112]
Governance Failures and Leadership Accountability
AFRINIC's governance structure, modeled on multistakeholder principles similar to other Regional Internet Registries, has been undermined by chronic failures in oversight, transparency, and enforcement of bylaws, leading to repeated scandals and operational paralysis. Internal audits as early as 2019 revealed inappropriate IP address allocations by staff, indicative of lax internal controls and inadequate leadership supervision, yet remedial actions were delayed or insufficient, allowing issues to escalate into broader crises.[7][90] By 2022, these lapses culminated in the Supreme Court of Mauritius dissolving the board and appointing a receiver due to irreconcilable conflicts and failure to maintain quorum, a direct consequence of board members' inability or unwillingness to adhere to governance protocols.[113][11]Leadership accountability has been notably deficient, with executives and directors evading personal consequences for decisions that depleted resources and eroded trust. For instance, a 2025 leaked contract disclosed that AFRINIC expended up to $10 million in legal fees under irregular arrangements with a firm linked to a convicted fraudster, involving conflicts of interest and overbilling, yet no board-level sanctions or repayments were enforced, highlighting a culture of impunity.[114] Similarly, allegations of internal corruption in resource allocation, confirmed in audits, resulted in staff terminations but spared higher leadership from scrutiny or restitution, as evidenced by the persistence of over 50 lawsuits without resolution of underlying accountability gaps.[7][115]Election processes have exemplified these failures, with the June 2025 board elections annulled amid credible reports of fraud, including falsified powers of attorney distributed to unauthorized voters, particularly Rwandan nationals, breaching membership verification rules.[116][117] ICANN's July 16, 2025, letter to AFRINIC leadership underscored these as symptomatic of deeper governance breakdowns, warning of potential sanctions for non-compliance with transparency standards and opaque practices that undermined multistakeholder legitimacy.[8][118] Despite a subsequent September 2025 election, prior leadership's failure to implement robust verification mechanisms perpetuated distrust, as proxy voting manipulations had allegedly distorted outcomes for decades without prior corrective accountability.[119][120]The absence of effective whistleblower protections and independent audits has further insulated leadership from accountability, as seen in unaddressed claims of lobbyingAfrican governments with member funds exceeding $1 million to influence outcomes, actions that violated fiduciary duties without internal repercussions.[121] Mauritius' appointment of a courtinspector in August 2025 to probe these systemic issues, including the legality of past court decisions and receiver performance, signals external recognition of internal mechanisms' collapse, yet it underscores AFRINIC's leadership's protracted inability to self-correct.[122][123] Overall, these failures have transformed AFRINIC into what stakeholders describe as a "failed registry," with accountability deficits rooted in weak enforcement rather than structural design alone.[124][125]
Impact of Prolonged Litigation on Operations
The protracted legal disputes, originating from AFRINIC's recovery actions against member Cloud Innovation Ltd. in 2020 and escalating through multiple Mauritius court proceedings, have imposed severe constraints on the organization's day-to-day functions. Court-mandated freezes on AFRINIC's bank accounts, enacted as early as 2021 and persisting into 2025, have blocked essential payments to staff, vendors, and operational expenses, effectively paralyzing financial management and procurement activities.[94][126][127]These restrictions have directly impaired core registry services, including the allocation of IPv4 addresses, IPv6 prefixes, and Autonomous System Numbers (ASNs), with national research and education networks (NRENs) reporting prolonged delays or outright denials in resource requests critical for expanding internet infrastructure across Africa.[128] The imposition of court receivership in 2023 further limited executive authority, prohibiting mergers, relocations, or significant management changes and contributing to a sustained leadership vacuum, including difficulties in recruiting a permanent CEO as of October 2025.[113][74]Governance processes have similarly stalled, with litigation delaying board elections and policy implementations; for instance, interim governance under receivers has overridden standard multistakeholder procedures, eroding member trust and operational efficiency.[129] International observers, including the Internet Society and ARIN, have warned that such disruptions threaten the broader stability of the global internet number registry system, potentially amplifying risks in IPv4 exhaustion scenarios for African networks.[89] Even following the September 2025 board election, unresolved court oversight and asset freezes have prevented a full resumption of autonomous operations, sustaining insolvency risks and service backlogs.[74][10]
Calls for Dissolution and Alternative Structures
Cloud Innovation Limited, a Mauritius-based entity embroiled in protracted litigation with AFRINIC over IP resource allocations, has been the primary proponent of dissolving the organization. In July 2025, amid a governance deadlock following the annulment of AFRINIC's board election due to voter irregularities, Cloud Innovation publicly called for AFRINIC's wind-up, arguing that its leadership had become "unworkable" and its governance "beyond repair."[97][120] The firm filed a formal winding-up petition against AFRINIC in the Supreme Court of Mauritius' Bankruptcy Division on July 14, 2025, citing chronic failures in restoring stable leadership despite multiple court interventions.[130] Cloud Innovation's advocacy, rooted in its own disputes—including AFRINIC's prior attempts to revoke its membership and recoup allocated IPv4 addresses—emphasizes that prolonged instability has eroded trust from ICANN and the broader RIR community, rendering continued operations untenable.[10]As an alternative to AFRINIC's persistence, Cloud Innovation has proposed the creation of a new regional internet registry for Africa, arguing that this would enable a "reset" in governance free from entrenched conflicts and bylaw violations. This vision aligns with criticisms that AFRINIC's bottom-up model has devolved into opaque decision-making, as evidenced by secret reform committees and election manipulations in 2025.[131] However, such proposals lack broad community endorsement and overlook the logistical complexities of reallocating AFRINIC's remaining IPv4 pool (approximately 1.2 million addresses as of mid-2025) and ASN management, potentially requiring inter-RIR transfers under existing policies. No formal mechanisms for redistribution to other RIRs like ARIN or RIPE NCC have gained traction, though historical discussions in 2021 suggested temporary service migrations as a contingency.(https://www.ripe.net/ripe/mail/archives/ripe-list/2021-July/002284.html)Opposition to dissolution has come from ICANN and AFRINIC stakeholders, who prioritize internal reforms over structural upheaval. On July 17, 2025, ICANN explicitly rejected calls for AFRINIC's dissolution, urging instead the restoration of a "legitimate and accountable board" through transparent elections and adherence to bylaws.(https://cadeproject.org/updates/icann-raises-concerns-over-afrinics-election-irregularities/) This stance reflects concerns that dissolution could disrupt Africa's internet numbering services, exacerbate IPv4 scarcity, and undermine the multi-stakeholder RIR model without addressing root causes like litigation delays. Critics of Cloud Innovation's push, including AFRINIC's interim receiver, contend that the petition serves the filer's interests in ongoing resource disputes rather than the continent's broader needs, potentially inviting external oversight that dilutes African sovereignty in internet governance.(https://btw.media/afrinic/how-can-african-governments-restore-trust-in-afrinic/) As of October 2025, the winding-up petition remains pending, with no consensus emerging for alternative structures beyond ad hoc reform proposals.
External Oversight and ICANN Involvement
The Internet Corporation for Assigned Names and Numbers (ICANN) provides external oversight to Regional Internet Registries (RIRs) like AFRINIC through its management of the Internet Assigned Numbers Authority (IANA) functions, which allocate global IPv4 and IPv6 address pools to RIRs based on established criteria and policies. This oversight ensures compliance with global standards for resource management, including verification of allocations and adherence to service agreements. AFRINIC, as the RIR for Africa, receives its number resources from IANA and is required to demonstrate operational stability and policy conformity to maintain this relationship.In response to AFRINIC's prolonged governance crisis beginning in 2022, ICANN intensified its monitoring, issuing public statements and formal communications to address risks to the regional registry's functionality. On March 9, 2025, ICANN acknowledged the appointment of a new court-appointed receiver, Gowtamsingh Dabee, by the Supreme Court of Mauritius and offered technical assistance to restore governance, emphasizing the need to repair AFRINIC's operational integrity.[75] This followed earlier concerns over board dissolution, litigation, and resource management failures that threatened AFRINIC's ability to fulfill RIR obligations, such as timely IP allocations.[132]ICANN's involvement escalated during AFRINIC's 2025 board election process, where it demanded transparency amid allegations of irregularities, including proxy abuse and voting credential issues. On June 6, 2025, ICANN sent a notice to the receiver urging immediate steps for fair elections and compliance with bylaws, warning that failures could lead to audits or loss of recognition as an RIR.[132] By June 20, 2025, ICANN secured a court ruling from Mauritius' Supreme Court requiring the receiver to communicate election assurances to members, reinforcing its push for accountability.[133]Further, on July 16, 2025, ICANN's CEO, Kurt Erik Lindqvist, issued an open letter to Mauritius' Minister of Information Technology, warning of a deepening governancecrisis and non-compliance with policies like ICP-2 on resource transfers, which could jeopardize AFRINIC's resource stewardship.[134] ICANN highlighted repeated offers of support ignored by AFRINIC leadership, underscoring the potential for broader impacts on African internet infrastructure if unresolved. Despite criticisms from some stakeholders alleging ICANN overreach, its actions align with contractual obligations to safeguard global number resource stability, including initiating policy developments like enhanced RIR compliance frameworks in response to the crisis.[77][99]