AFRINIC

Last updated

African Network Information Centre
AbbreviationAfrican Network Information Centre (AFRINIC)
Formation11 October 2004
TypeNot for Profit
FocusAllocation and registration of IP address space
Headquarters Ebene, Mauritius
Location
  • Mauritius
ServicesInternet Number Resources Management (ASNs, IPv6 and IPv4)
Official language
English and French
Key people

(Chairman of the Board of Directors)

(CEO)
AffiliationsIANA, ICANN, ASO, NRO
Staff
50+
Website www.afrinic.net

AFRINIC (African Network Information Centre) is the regional Internet registry (RIR) [1] for Africa. Its headquarters [2] are in Ebene, Mauritius.

Contents

Before AFRINIC was formed, IP addresses (IPv6 and IPv4) for Africa were distributed by the Asia-Pacific Network Information Centre (APNIC), the American Registry for Internet Numbers (ARIN), and the RIPE NCC. ICANN provisionally recognized AFRINIC on 11 October 2004. [3] The registry became operational on 22 February 2005. ICANN gave it final recognition [4] in April 2005.

Organizational structure

Board of directors

The AFRINIC Board consists of a nine-member Board of Directors. [5] Six of the directors are elected to represent the different sub-regions, while two directors are elected to serve on the Board-based solely on competency as opposed to regional representation. The last seat on the Board is filled by the Chief Executive Officer.

Elections are held at each AFRNIC Annual General Meeting (AGMM), which is conducted around May/June every year. Voting takes place both on-site at these meetings and prior to the meeting via online voting.

Council of Elders

The AFRINIC Council of Elders Archived 19 September 2018 at the Wayback Machine consists of six former AFRINIC chairpersons.

They fulfill an advisory role and harness all their experience leading the organization as former Chairs.

The Members of the AFRINIC Council of Elders are:

  1. Dr. Nii N. Quaynor (AFRINIC Board of Trustees Chair: 2001–2004)
  2. Mr. Pierre S. Dandjinou (AFRINIC Chair: 2004–2008) Board Member: 2004-2010
  3. Dr. Viv Padayatchy (AFRINIC Chair: 2008–2011) - Board Member: - 2005-2011
  4. Mrs. Maimouna Ndeye Diop Diagne (AFRINIC Chair: 2011–2012) - Board Member: 2010-2013
  5. Dr. Christian Bope

AFRINIC Staff

AFRINIC staff carries out the daily operations of the organization.

The Staff is structured in nine departments: CEO's Office, HR and Administration, Research and Innovation, Finance and Accounting, External Relations, Communication and Public Relations, Member Services, IT and Engineering, and Capacity Building. These divisions encompass all AFRINIC activities, including that of acting as a central source of information for Members.

AFRINIC's open policy development process also invites stakeholders interested in Internet number resources from around the world (but mostly the African region) to participate. These include representatives from governments, regulators, educators, media, the technical community, civil society, and other not-for-profit organizations.

Public Policy Meeting

Each year, AFRINIC conducts two public policy meetings. These give the community the chance to come together for policy development, information sharing, and networking. The first Public Policy Meeting of each year is known as the Africa Internet Summit (AIS), and the second is held as a standalone meeting. The meetings are held in various locations throughout Africa.

Controversies and scandals

AFRINIC has been at the center of several organizational controversies in the past five years.

Corruption

A former senior management member from AFRINIC, Ernest Byaruhanga, committed what is tagged to be Africa's greatest internet heist. In total, 4.1 million IP addresses were stolen. 2.3 million came from AFRINIC's “free pool” and a further 1.7 million were “legacy” IP addresses. They were worth around $87M, according to MyBroadband. IPv4 addresses, which were already reserved and in use by major organizations were effectively hijacked and sold. These reappropriated IP addresses were used to forward spam, breach data records, and compromise functioning websites. Dozens of South African-based companies and businesses were impacted. Education sectors and the Department of Defence were also hit, losing addresses worth approximately $5.3M.

Sexual harassment

In March 2018, a sexual harassment complaint was filed by the RIR's former head of external relations, Vymala Poligadu. She alleged that she had been sexually harassed by Afrinic's former chair Sunday Folayan, former vice-chair Hytham El-Nakhal, and former finance director Patrisse Deesse. She also alleged that they had been actively plotting to get her fired from her position. The internal report detailing Poligadu's accusations was then leaked onto the organization's discussion mailing list by an anonymous poster, writing in response to a complaint by another member about high staff turnover.

Sunday Folayan and Haitham El Nakhal quit after the victim filed the complaint detailing the toxic and unprofessional work environment in AFRINIC while stating that she is just one of many female staff who are harassed and intimidated daily by male staff at AFRINIC. AFRINIC has not addressed the text messages pestering the now-departed AFRINIC female staffer, and has announced that there had been no evidence of harassment, bullying or intimidation on the part of certain members of the board. [6]

Lawsuits

Lawsuit due to senior management's corruption

Afri Holdings Ltd & Others vs AFRINIC

In June 2020, AFRINIC was taken to court by one of the men whose name and company have been linked to the heist of the African Internet resources committed by a founding member of AFRINIC, Ernest Byaruhanga. In a notice sent to individuals and organizations that hold IP addresses in the African region, the then AFRINIC CEO Eddy Kayihura stated that an application for an interim injunction against AFRINIC was brought before the Commercial Division of the Supreme Court of Mauritius. The application was lodged by Afri Holdings Ltd, Netstyle A. Ltd, and Elad Cohen. Internet investigator Ron Guilmette has linked Netstyle and Cohen's e-mail address to suspicious activity in South Africa, caused by large chunks of South African Internet Protocol address space, worth millions of dollars on the open reseller market, being stolen by AFRINIC's ex-top senior executive Ernest Byaruhanga. Affected IP addresses included a block that belongs to Sasol, and blocks that appear to belong to Tredcor, Afrox, Woolworths, and SITA. Documents obtained in August 2019 also showed that Cohen is a director and shareholder of Afri Holdings Ltd. [7] [8]

Logic Web Inc vs AFRINIC

On 1 October 2021, Logic Web Inc initiated an application for an interim injunction against AFRINIC. LogicWeb Inc has received a 196.52.0.0/14 block under the registered name of "ITC", which is a made-up name for a fake corporate entity that never existed, and one that was invented by the ex-AFRINIC senior management Ernest Byaruhanga as a WHOIS cover story for his IP addresses famous heist. The 196.52.0.0/14 block was another one of AFRINIC's senior management's thefts from the free pool and one that was subsequently sold or gifted to the proprietor of LogicWeb, Inc. of New York, USA, i.e. a certain Mr. Chad Abizeid. Sometime after Mr. Chad Abizeid received the 196.52.0.0/14 block that was stolen by Ernest Byaruhanga, which is worth well over $5 million, Mr. Abizeid tried to sell off the entire thing at once. Before recently reclaiming the stolen Internet Resources, the ex-CEO AFRINIC CEO, Eddy Kayihura, has known about the misappropriated 196.52.0.0/14 block for quite some time without taking any actions of reclaiming it, in potential with corruption from Mr. Abizeid, similar to the AfriHoldings lawsuit case.

AFRINIC's scandal of committing the biggest Internet Resources heist, valued at more than 50 million dollars, is still affecting businesses operations that are struggling to recover from AFRINIC's attempts of concealing the gravity of the thefts by reclaiming the stolen IP resources, with little to no consideration of the consequences on the African Internet Connectivity. These businesses are now taking the matter to the Mauritius Courts by filing lawsuits against AFRINIC's management. [9]

Cloud Innovation Ltd vs AFRINIC

AFRINIC has been in a feud with Cloud Innovation (CI) since July 2021, as it intended to revoke over 6 million IP addresses from the company backing the claim by stating a breach in policy. However, Afrinic's attempt to seize IP addresses currently under Cloud Innovation's domain backfired, as by bringing the issue directly to court, without an effort to de-escalate the matter, the RIR did not follow its own in-house policies.

As a result of the unfounded claims advanced by Afrinic, the Supreme Court of Mauritius ordered that Afrinic bank accounts be frozen, thereby crippling its operations. On July 15, due to court order, Afrinic restored CI's IP address blocks. However, the RIR's bank assets remained frozen until October 15, when they were granted the removal of the freezing order against AFRINIC in the Mauritius Court. The litigation is still ongoing[ citation needed ].

With the amount of IP addresses involved and Cloud Innovation's large international customer base, this litigation is said to be potentially impacting a large majority of the Internet's connectivity and operations. Internet professionals all over the world have raised concerns about the possible consequences that would result from Cloud Innovation's membership being possibly terminated[ citation needed ].

In 2022, Cloud Innovation won in court against AFRINIC, with a Supreme Court Judge ruling in favor of the plaintiff, CI, and against AFRINIC. The Supreme Court Judge concluded that the lawsuits were caused by the registry's dogged “determination… to terminate (the plaintiff’s) membership.” At the same time, the judge found no evidence of the lawsuits being indeed vexatious, asking how “in these circumstances… can it be held against the applicant […] that it resorted to the court to preserve its rights?” [10]

Africa on Cloud (PTY) Ltd v Afrinic

An Injunction has been issued against AFRINIC's board's illegal attempt to extend Director's term, In particular, board seat number 6 is currently being held by Abdalla Omari. [11] This seat was given to Mr. Omari through the passing of an illegal resolution to extend a board member's office without an election.

Crystal Web (Pty) Ltd v AFRINIC

An order has been granted to Crystal Web, one of resources member of AFRINIC, [12] to suspend the CEO of AFRINIC, Eddy Mabano Kayihura, after he tried to censor the community discussion list of AFRINIC [13] because a resource member had uncovered information linking the CEO with a known terrorist supporter, [14] Furthermore, Eddy has been the subject of many controversial and corruptions allegations over the short 2 years since he was in the office,. [15] During his tenure as CEO, nearly 50 lawsuits have been filed against AFRINIC, with AFRINIC having been sued by over 8 different parties, including internal parties. [16]

Lawsuit by suspended CEO Kayihura Mabano Eddy against AFRINIC

In July 2022, Eddy Kayihura tried to bypass member-based elections by the ATU to appoint directors though the court, [17] thereby violating the bottom-up process in which the RIR is built on and hampering the intended effect of the internet self-governance model. [18]

Interfere with rule of law and its home nation's sovereignty

The other four RIRs sent a letter in the name of Number Resources Organization (NRO) to the Mauritius government requesting government recognition of AFRINIC's international status. [19]

This letter was not received well by the global community, and Sander Steffan, one of the NRO's number council members, described such a move as "neo-colonialism". [20]

A formal board member of AFRINIC, CTO of Liquid Labs, also sent a letter to the Mauritius government requesting that they not act on the NRO letter by stating "please disregard it in its entirety and that the legal process be allowed to play out as per the Mauritian legal system". [21]

International media at large has also been against this letter with one media personality calling it "causing collateral damage". Another referenced such action as a top-down approach (contradicting to bottom-up approach RIR was founded on) and questioned why RIR resisted the ITU proposal to take them over in the immunity is what they want. [18]

The NRO letter called Cloud Innovation a vexatious litigant, but a week later a judgment from the supreme court was delivered that specifically noted Cloud Innovation is not a vexatious litigant. The judgement criticized AFRINIC for trying to pervert the course of justice. [22]

IPv4 exhaustion

In April 2017, AFRINIC became the last regional Internet registry to run down to its last /8 block of IPv4 addresses (102/8), thus triggering the final phase of its IPv4 exhaustion policy. As a result, AFRINIC then implemented a soft landing policy for allocating the last /8 to its users, in which, since Phase 2 of the exhaustion period (started in January 2020 [23] ), each AFRINIC customer is eligible for just one final maximum allocation of a /22 block of IPv4 addresses until the block is exhausted. [24]

AFRINIC training

AFRINIC conducts a number of training courses [25] in a wide variety of locations [26] around the region. These courses are designed to educate participants to proficiently configure, manage and administer their Internet services and infrastructure and to embrace current best practices.

WHOIS database

The AFRINIC WHOIS Database [27] contains registration details of IP addresses and AS numbers originally allocated by AFRINIC. It shows the organizations that hold the resources, where the allocations were made, and contact details for the networks. The organizations that hold those resources are responsible for updating their information in the database. The database can be searched by using the web interface on the AFRINIC site or by directing your whois client to whois.afrinic.net (for example, whois -h whois.afrinic.net 196.1.0.0/24).

The AFRINIC membership

Major [28] Internet Service Providers (ISPs), Internet exchange point (IXPs), governments and academic institutions.

Policy development process

AFRINIC's policies are developed by the membership and broader Internet community. The major media for policy development are the face-to-face Public Policy Meetings, [29] which are held twice each year, and mailing list discussions.

AFRINIC's policy development process [30] is:
OpenTransparentBottom-up
Anyone can propose policies.AFRNIC publicly documents all policy discussions and decisions.The community drives policy development.
Everyone can discuss policy proposals.AFRINIC documents all policy discussions and decisions to provide complete transparency of the policy development process.

Economies

AFRINIC's service region [31] is divided into six sub-regions in Africa for statistic gathering purposes and for Board of Directors elections to ensure regional representation.

These sub-regions are: Northern, Western, Central, Eastern, Southern and the Indian Ocean.

AFRINIC's service region also includes several islands located in the Atlantic Ocean which are listed in the Western or Central African regions.

EASTERN REGIONWESTERN REGIONCENTRAL AFRICANORTHERN AFRICASOUTHERN AFRICAINDIAN OCEAN
BurundiBeninCameroonAlgeriaAngolaMauritius
DjiboutiBurkina FasoCentral African RepublicEgyptBotswanaRéunion
EritreaCape VerdeDemocratic Republic of the CongoLibyaLesothoComoros
EthiopiaCôte d'IvoireEquatorial GuineaMoroccoNamibiaMayotte
KenyaGambiaGabonSudanSouth AfricaMadagascar
TanzaniaGhanaRepublic of the CongoSouth SudanSwazilandSeychelles
RwandaGuineaSão Tomé and PríncipeTunisiaMozambique
SomaliaLiberiaChadMauritaniaMalawi
UgandaMaliZambia
NigerZimbabwe
Nigeria
Senegal
Sierra Leone
Togo

See also

Related Research Articles

The American Registry for Internet Numbers (ARIN) is the regional Internet registry for the United States, Canada, and many Caribbean and North Atlantic islands. ARIN manages the distribution of Internet number resources, including IPv4 and IPv6 address space and AS numbers. ARIN opened for business on December 22, 1997 after incorporating on April 18, 1997. ARIN is a nonprofit corporation with headquarters in Chantilly, Virginia, United States.

An Internet Protocol address is a numerical label such as 192.0.2.1 that is assigned to a device connected to a computer network that uses the Internet Protocol for communication. IP addresses serve two main functions: network interface identification, and location addressing.

<span class="mw-page-title-main">ICANN</span> American nonprofit organization that coordinates several Internet address databases

The Internet Corporation for Assigned Names and Numbers is a global multistakeholder group and nonprofit organization head-quartered in the United States responsible for coordinating the maintenance and procedures of several databases related to the namespaces and numerical spaces of the Internet, ensuring the Internet's stable and secure operation. ICANN performs the actual technical maintenance work of the Central Internet Address pools and DNS root zone registries pursuant to the Internet Assigned Numbers Authority (IANA) function contract. The contract regarding the IANA stewardship functions between ICANN and the National Telecommunications and Information Administration (NTIA) of the United States Department of Commerce ended on October 1, 2016, formally transitioning the functions to the global multistakeholder community.

<span class="mw-page-title-main">Internet Protocol version 4</span> Fourth version of the Internet Protocol

Internet Protocol version 4 (IPv4) is the fourth version of the Internet Protocol (IP). It is one of the core protocols of standards-based internetworking methods in the Internet and other packet-switched networks. IPv4 was the first version deployed for production on SATNET in 1982 and on the ARPANET in January 1983. It is still used to route most Internet traffic today, even with the ongoing deployment of Internet Protocol version 6 (IPv6), its successor.

<span class="mw-page-title-main">IPv6</span> Version 6 of the Internet Protocol

Internet Protocol version 6 (IPv6) is the most recent version of the Internet Protocol (IP), the communications protocol that provides an identification and location system for computers on networks and routes traffic across the Internet. IPv6 was developed by the Internet Engineering Task Force (IETF) to deal with the long-anticipated problem of IPv4 address exhaustion, and was intended to replace IPv4. In December 1998, IPv6 became a Draft Standard for the IETF, which subsequently ratified it as an Internet Standard on 14 July 2017.

Classless Inter-Domain Routing is a method for allocating IP addresses for IP routing. The Internet Engineering Task Force introduced CIDR in 1993 to replace the previous classful network addressing architecture on the Internet. Its goal was to slow the growth of routing tables on routers across the Internet, and to help slow the rapid exhaustion of IPv4 addresses.

<span class="mw-page-title-main">APNIC</span> Regional Internet registry for the Asia Pacific region

APNIC is the regional Internet address registry (RIR) for the Asia-Pacific region. It is one of the world's five RIRs and is part of the Number Resource Organization (NRO).

<span class="mw-page-title-main">Internet Assigned Numbers Authority</span> Standards organization overseeing IP addresses

The Internet Assigned Numbers Authority (IANA) is a standards organization that oversees global IP address allocation, autonomous system number allocation, root zone management in the Domain Name System (DNS), media types, and other Internet Protocol–related symbols and Internet numbers.

<span class="mw-page-title-main">Regional Internet registry</span> Organization responsible for managing network numbering

A regional Internet registry (RIR) is an organization that manages the allocation and registration of Internet number resources within a region of the world. Internet number resources include IP addresses and autonomous system (AS) numbers.

<span class="mw-page-title-main">LACNIC</span>

LACNIC is the regional Internet registry for the Latin American and Caribbean regions.

An autonomous system (AS) is a collection of connected Internet Protocol (IP) routing prefixes under the control of one or more network operators on behalf of a single administrative entity or domain, that presents a common and clearly defined routing policy to the Internet. Each AS is assigned an autonomous system number (ASN), for use in Border Gateway Protocol (BGP) routing. Autonomous System Numbers are assigned to Local Internet Registries (LIRs) and end-user organizations by their respective Regional Internet Registries (RIRs), which in turn receive blocks of ASNs for reassignment from the Internet Assigned Numbers Authority (IANA). The IANA also maintains a registry of ASNs which are reserved for private use.

<span class="mw-page-title-main">.so</span> Internet country code top-level domain for Somalia

.so is the internet country code top-level domain (ccTLD) for Somalia. After a long absence, the .so domain was officially relaunched on November 1, 2010, by .SO Registry, which is regulated by the nation's Ministry of Posts and Telecommunications. It was launched through various accredited registrars around the world.

RIPE NCC is the regional Internet registry (RIR) for Europe, the Middle East and parts of Central Asia. Its headquarters are in Amsterdam, Netherlands, with a branch office in Dubai, UAE.

<span class="mw-page-title-main">Internet governance</span> System of laws, norms, rules, policies and practices

Internet governance consists of a system of laws, rules, policies and practices that dictate how its board members manage and oversee the affairs of any internet related-regulatory body. This article describes how the Internet was and is currently governed, some inherent controversies, and ongoing debates regarding how and why the Internet should or should not be governed in future.

A provider-independent address space (PI) is a block of IP addresses assigned by a regional Internet registry (RIR) directly to an end-user organization. The user must contract with a local Internet registry (LIR) through an Internet service provider to obtain routing of the address block within the Internet.

WHOIS is a query and response protocol that is used for querying databases that store an Internet resource's registered users or assignees. These resources include domain names, IP address blocks and autonomous systems, but it is also used for a wider range of other information. The protocol stores and delivers database content in a human-readable format. The current iteration of the WHOIS protocol was drafted by the Internet Society, and is documented in RFC 3912.

<span class="mw-page-title-main">IPv4 address exhaustion</span> Depletion of unallocated IPv4 addresses

IPv4 address exhaustion is the depletion of the pool of unallocated IPv4 addresses. Because the original Internet architecture had fewer than 4.3 billion addresses available, depletion has been anticipated since the late 1980s when the Internet started experiencing dramatic growth. This depletion is one of the reasons for the development and deployment of its successor protocol, IPv6. IPv4 and IPv6 coexist on the Internet.

The Registration Data Access Protocol (RDAP) is a computer network communications protocol standardized by a working group at the Internet Engineering Task Force in 2015, after experimental developments and thorough discussions. It is a successor to the WHOIS protocol, used to look up relevant registration data from such Internet resources as domain names, IP addresses, and autonomous system numbers.

References

  1. "RIR Governance Matrix | The Number Resource Organization". www.nro.net. Archived from the original on 17 July 2018. Retrieved 17 July 2018.
  2. "AFRINIC Contact Details". afrinic.net.
  3. "AFRINIC Provisional Approval by ICANN". icann.org.
  4. "IANA Report on Recognition of AfriNIC as a Regional Internet Registry". iana.org.
  5. "Appointment of Directors as per AFRINIC Bylaws". afrinic.net. Archived from the original on 18 July 2018.
  6. "Africa's internet body hit with sexual harassment cover-up claims".
  7. https://mybroadband.co.za/news/internet/363694-man-connected-to-african-ip-address-heist-sues-afrinic.htm/ [ dead link ]
  8. "List of Court Cases involving AFRINIC - AFRINIC - Regional Internet Registry for Africa". afrinic.net. Archived from the original on 21 December 2021.
  9. "[afnog][Community-Discuss] Updates on the misappropriation of IPv4 resources". afnog.org. Archived from the original on 20 January 2021.
  10. "AFRINIC loses legal battle in Mauritius' highest court". 16 August 2022.
  11. "[Community-Discuss] Interim order of June 14th 2022". Lists.afrinic.net. Retrieved 18 September 2022.
  12. "Supreme Court - Crystal Web vs Afrinic & Eddy Kayihura" (PDF). afrinic.net. Retrieved 2 April 2023.
  13. "[Community-Discuss] Temporary emergency moderation". Lists.afrinic.net. 24 June 2022. Retrieved 18 September 2022.
  14. "[Community-Discuss] NRS Official Response to Amin Dayekh allegation highlighting concerns around potential terrorism funding and support". Lists.afrinic.net. Retrieved 18 September 2022.
  15. "The Downfall of AFRINIC under the Corrupt Leadership of Eddy Kayihura". 8 July 2022.
  16. "List of Court Cases involving AFRINIC".
  17. "Exposed: Suspended CEO in secret appeal calling for ATU interference". 22 July 2022.
  18. 1 2 "IP-Adressen: Rechtsstreit um Afrinic gefährdet Selbstverwaltung".
  19. "NRO Letter to Mauritius Government | the Number Resource Organization".
  20. "[members-discuss] NRO letter to Mauritian Government members-discuss — RIPE Network Coordination Centre".
  21. "A Rebuttal to the NRO's letter to the Mauritian Government".
  22. "Interlocutory judgement" (PDF). afrinic.net. Retrieved 2 April 2023.
  23. "AFRINIC enters IPv4 Exhaustion Phase 2". afrinic.net. 13 January 2020. Retrieved 26 June 2021.
  24. "AFRINIC Enters IPv4 Exhaustion Phase 1". afrinic.net. 3 April 2017. Retrieved 26 June 2021.
  25. "AFRINIC Learn Portal". learn.afrinic.net. Archived from the original on 17 July 2018.
  26. "AFRINIC Onsite Traininf Locations". learn.afrinic.net. Archived from the original on 17 July 2018.
  27. "AFRINIC WHOIS Database Web Query Tool". afrinic.net.
  28. "AFRINIC Membership Statistics". afrinic.net.
  29. "Guide to Hosting AFRINIC Meetings" (PDF). afrinic.net. AFRINIC.
  30. "AFRINIC Policy Development Process (PDP)". afrinic.net. AFRINIC.
  31. "AFRINIC Service Region". afrinic.net.

20°14′42″S57°29′30″E / 20.2450°S 57.4916°E / -20.2450; 57.4916