Formation: | 11 October 2004 |
Type: | Not for Profit |
Purpose: | Regional Internet Registry for Africa |
Headquarters: | Ebene, Mauritius |
Services: | Internet Number Resources Management (ASNs, IPv6 and IPv4) |
Language: | English and French |
Leader Title: | Chairman of Board of Directors |
Leader Name: | Benjamin Eshun[1] |
Leader Title2: | Vice-Chairman of Board of Directors |
Leader Name2: | Abdalla Omari |
Leader Title3: | Chief Executive Officer |
Leader Name3: | (vacant at the moment)[2] |
Affiliations: | IANA, ICANN, ASO, NRO |
African Network Information Centre | |
Staff: | 50+ |
Focus: | Allocation and registration of IP address space |
Abbreviation: | African Network Information Centre (AFRINIC) |
Location: | Mauritius |
AFRINIC (African Network Information Centre) is the regional Internet registry (RIR)[3] for Africa. Its headquarters[4] are in Ebene, Mauritius.
Before AFRINIC was formed, IP addresses (IPv6 and IPv4) for Africa were distributed by the Asia-Pacific Network Information Centre (APNIC), the American Registry for Internet Numbers (ARIN), and the RIPE NCC. ICANN provisionally recognized AFRINIC on 11 October 2004.[5] The registry became operational on 22 February 2005. ICANN gave it final recognition[6] in April 2005.
AFRINIC consists of a nine-member Board of Directors.[7] Six of the directors are elected to represent the different sub-regions, while two directors are elected to serve on the Board-based solely on competency as opposed to regional representation. The last seat on the Board is filled by the Chief Executive Officer.
Elections are held at each AFRNIC Annual General Meeting (AGMM), which is conducted around May/June every year. Voting takes place both on-site at these meetings and prior to the meeting via online voting.
The AFRINIC Council of Elders consists of six former AFRINIC chairpersons.
They fulfill an advisory role and harness all their experience leading the organization as former Chairs.
The Members of the AFRINIC Council of Elders are:
AFRINIC staff carries out the daily operations of the organization.
The Staff is structured in nine departments: CEO's Office, HR and Administration, Research and Innovation, Finance and Accounting, External Relations, Communication and Public Relations, Member Services, IT and Engineering, and Capacity Building. These divisions encompass all AFRINIC activities, including that of acting as a central source of information for Members.
AFRINIC's open policy development process also invites stakeholders interested in Internet number resources from around the world (but mostly the African region) to participate. These include representatives from governments, regulators, educators, media, the technical community, civil society, and other not-for-profit organizations.
Each year, AFRINIC conducts two public policy meetings. These give the community the chance to come together for policy development, information sharing, and networking. The first Public Policy Meeting of each year is known as the Africa Internet Summit (AIS), and the second is held as a standalone meeting. The meetings are held in various locations throughout Africa.
AFRINIC has been at the center of several organizational controversies in the past five years.
A former senior management member from AFRINIC, Ernest Byaruhanga, committed what is tagged to be Africa's greatest internet heist. In total, 4.1 million IP addresses were stolen. 2.3 million came from AFRINIC's “free pool” and a further 1.7 million were “legacy” IP addresses. They were worth around $87M, according to MyBroadband. IPv4 addresses, which were already reserved and in use by major organizations were effectively hijacked and sold. These reappropriated IP addresses were used to forward spam, breach data records, and compromise functioning websites. Dozens of South African-based companies and businesses were impacted. Education sectors and the Department of Defence were also hit, losing addresses worth approximately $5.3M.
In March 2018, allegations were filed by the RIR's former head of external relations, Vymala Poligadu. She alleged that the Board chair, VC and the head of financial department had been actively plotting to get her fired from her position. She also alleged that one of the staff had been sexually harassed by Afrinic's former chair Sunday Folayan.
The internal report detailing Poligadu's accusations was then leaked onto the organization's discussion mailing list by an anonymous poster, writing in response to a complaint by another member about high staff turnover.
The independent Investigation Committee's (IC) report concluded that the allegations were false and the chair breached the NDA of Board members;Sunday Folayan quit after the Investigation Committee proved that he breached the signed NDA of AFRINIC Board members.[8]
In June 2020, AFRINIC was taken to court by one of the men whose name and company have been linked to the heist of the African Internet resources committed by a founding member of AFRINIC, Ernest Byaruhanga. In a notice sent to individuals and organizations that hold IP addresses in the African region, the then AFRINIC CEO Eddy Kayihura stated that an application for an interim injunction against AFRINIC was brought before the Commercial Division of the Supreme Court of Mauritius.The application was lodged by Afri Holdings Ltd, Netstyle A. Ltd, and Elad Cohen. Internet investigator Ron Guilmette has linked Netstyle and Cohen's e-mail address to suspicious activity in South Africa, caused by large chunks of South African Internet Protocol address space, worth millions of dollars on the open reseller market, being stolen by AFRINIC's ex-top senior executive Ernest Byaruhanga.Affected IP addresses included a block that belongs to Sasol, and blocks that appear to belong to Tredcor, Afrox, Woolworths, and SITA. Documents obtained in August 2019 also showed that Cohen is a director and shareholder of Afri Holdings Ltd.[9] [10]
On 1 October 2021, Logic Web Inc initiated an application for an interim injunction against AFRINIC.LogicWeb Inc has received a 196.52.0.0/14 block under the registered name of "ITC", which is a made-up name for a fake corporate entity that never existed, and one that was invented by the ex-AFRINIC senior management Ernest Byaruhanga as a WHOIS cover story for his IP addresses famous heist. The 196.52.0.0/14 block was another one of AFRINIC's senior management's thefts from the free pool and one that was subsequently sold or gifted to the proprietor of LogicWeb, Inc. of New York, USA, i.e. a certain Mr. Chad Abizeid. Sometime after Mr. Chad Abizeid received the 196.52.0.0/14 block that was stolen by Ernest Byaruhanga, which is worth well over $5 million, Mr. Abizeid tried to sell off the entire thing at once. Before recently reclaiming the stolen Internet Resources, the ex-CEO AFRINIC CEO, Eddy Kayihura, has known about the misappropriated 196.52.0.0/14 block for quite some time without taking any actions of reclaiming it, in potential with corruption from Mr. Abizeid, similar to the AfriHoldings lawsuit case.
AFRINIC's scandal of committing the biggest Internet Resources heist, valued at more than 50 million dollars, is still affecting businesses operations that are struggling to recover from AFRINIC's attempts of concealing the gravity of the thefts by reclaiming the stolen IP resources, with little to no consideration of the consequences on the African Internet Connectivity. These businesses are now taking the matter to the Mauritius Courts by filing lawsuits against AFRINIC's management.[11]
AFRINIC has been in a feud with Cloud Innovation (CI) since July 2021, as it intended to revoke over 6 million IP addresses from the company backing the claim by stating a breach in policy. However, Afrinic's attempt to seize IP addresses currently under Cloud Innovation's domain backfired, as by bringing the issue directly to court, without an effort to de-escalate the matter, the RIR did not follow its own in-house policies.
As a result of the unfounded claims advanced by Afrinic, the Supreme Court of Mauritius ordered that Afrinic bank accounts be frozen, thereby crippling its operations. On 15 July, due to court order, Afrinic restored CI's IP address blocks. However, the RIR's bank assets remained frozen until 15 October, when they were granted the removal of the freezing order against AFRINIC in the Mauritius Court. The litigation is still ongoing.
With the amount of IP addresses involved and Cloud Innovation's large international customer base, this litigation is said to be potentially impacting a large majority of the Internet's connectivity and operations. Internet professionals all over the world have raised concerns about the possible consequences that would result from Cloud Innovation's membership being possibly terminated.
In 2022, Cloud Innovation won in court against AFRINIC, with a Supreme Court Judge ruling in favor of the plaintiff, CI, and against AFRINIC. The Supreme Court Judge concluded that the lawsuits were caused by the registry's dogged “determination… to terminate (the plaintiff’s) membership.” At the same time, the judge found no evidence of the lawsuits being indeed vexatious, asking how “in these circumstances… can it be held against the applicant […] that it resorted to the court to preserve its rights?”[12]
An Injunction has been issued against AFRINIC's board's illegal attempt to extend Director's term, In particular, board seat number 6 is currently being held by Abdalla Omari.[13] This seat was given to Mr. Omari through the passing of an illegal resolution to extend a board member's office without an election.
An order has been granted to Crystal Web, one of resources member of AFRINIC,[14] to suspend the CEO of AFRINIC, Eddy Mabano Kayihura, after he tried to censor the community discussion list of AFRINIC[15] because a resource member had uncovered information linking the CEO with a known terrorist supporter.[16] Furthermore, Eddy has been the subject of many controversial and corruptions allegations over the short 2 years since he was in the office.[17] During his tenure as CEO, nearly 50 lawsuits have been filed against AFRINIC, with AFRINIC having been sued by over 8 different parties, including internal parties.[18]
In July 2022, Eddy Kayihura tried to bypass member-based elections by the ATU to appoint directors though the court,[19] thereby violating the bottom-up process in which the RIR is built on and hampering the intended effect of the internet self-governance model.[20]
The other four RIRs sent a letter in the name of Number Resources Organization (NRO) to the Mauritius government requesting government recognition of AFRINIC's international status.[21]
This letter was not received well by the global community, and Sander Steffan, one of the NRO's number council members, described such a move as "neo-colonialism".[22]
A formal board member of AFRINIC, CTO of Liquid Labs, also sent a letter to the Mauritius government requesting that they not act on the NRO letter by stating "please disregard it in its entirety and that the legal process be allowed to play out as per the Mauritian legal system".[23]
International media at large has also been against this letter with one media personality calling it "causing collateral damage". Another referenced such action as a top-down approach (contradicting to bottom-up approach RIR was founded on) and questioned why RIR resisted the ITU proposal to take them over in the immunity is what they want.[20]
The NRO letter called Cloud Innovation a vexatious litigant, but a week later a judgment from the supreme court was delivered that specifically noted Cloud Innovation is not a vexatious litigant. The judgement criticized AFRINIC for trying to pervert the course of justice.[24]
In April 2017, AFRINIC became the last regional Internet registry to run down to its last /8 block of IPv4 addresses (102/8), thus triggering the final phase of its IPv4 exhaustion policy. As a result, AFRINIC then implemented a soft landing policy for allocating the last /8 to its users, in which, since Phase 2 of the exhaustion period (started in January 2020[25]), each AFRINIC customer is eligible for just one final maximum allocation of a /22 block of IPv4 addresses until the block is exhausted.[26]
AFRINIC conducts a number of training courses[27] in a wide variety of locations[28] around the region. These courses are designed to educate participants to proficiently configure, manage and administer their Internet services and infrastructure and to embrace current best practices.
The AFRINIC WHOIS Database[29] contains registration details of IP addresses and AS numbers originally allocated by AFRINIC. It shows the organizations that hold the resources, where the allocations were made, and contact details for the networks. The organizations that hold those resources are responsible for updating their information in the database. The database can be searched by using the web interface on the AFRINIC site or by directing your whois client to whois.afrinic.net (for example, whois -h whois.afrinic.net 196.1.0.0/24).
Major[30] Internet Service Providers (ISPs), Internet exchange point (IXPs), governments and academic institutions.
AFRINIC's policies are developed by the membership and broader Internet community. The major media for policy development are the face-to-face Public Policy Meetings,[31] which are held twice each year, and mailing list discussions.
Anyone can propose policies. | AFRNIC publicly documents all policy discussions and decisions. | The community drives policy development. | |
Everyone can discuss policy proposals. | AFRINIC documents all policy discussions and decisions to provide complete transparency of the policy development process. |
AFRINIC's service region[33] is divided into six sub-regions in Africa for statistic gathering purposes and for Board of Directors elections to ensure regional representation.
These sub-regions are: Northern, Western, Central, Eastern, Southern and the Indian Ocean.
AFRINIC's service region also includes several islands located in the Atlantic Ocean which are listed in the Western or Central African regions.
EASTERN REGION | WESTERN REGION | CENTRAL AFRICA | NORTHERN AFRICA | SOUTHERN AFRICA | INDIAN OCEAN | |
---|---|---|---|---|---|---|
Burundi | Benin | Cameroon | Morocco | Angola | Mauritius | |
Djibouti | Burkina Faso | Central African Republic | Egypt | Botswana | Réunion | |
Eritrea | Cape Verde | Democratic Republic of the Congo | Libya | Lesotho | Comoros | |
Ethiopia | Côte d'Ivoire | Equatorial Guinea | Algeria | Namibia | Mayotte | |
Kenya | Gambia | Gabon | Sudan | South Africa | Madagascar | |
Tanzania | Ghana | Republic of the Congo | South Sudan | Swaziland | Seychelles | |
Rwanda | Guinea | São Tomé and Príncipe | Tunisia | Mozambique | ||
Somalia | Liberia | Chad | Mauritania | Malawi | ||
Uganda | Mali | Zambia | ||||
Niger | Zimbabwe | |||||
Nigeria | ||||||
Senegal | ||||||
Sierra Leone | ||||||
Togo |