AFRINIC

African Network Information Centre
AbbreviationAfrican Network Information Centre (AFRINIC)
Formation11 October 2004
TypeNot for Profit
FocusAllocation and registration of IP address space
HeadquartersEbene, Mauritius
Location
  • Mauritius
ServicesInternet Number Resources Management (ASNs, IPv6 and IPv4)
Official language
English and French
Chairman of Board of Directors
Benjamin Eshun[1]
Vice-Chairman of Board of Directors
Abdalla Omari
Chief Executive Officer
(vacant at the moment)[2]
AffiliationsIANA, ICANN, ASO, NRO
Staff50+
Websitewww.afrinic.net

AFRINIC (African Network Information Centre) is the regional Internet registry (RIR)[3] for Africa. Its headquarters[4] are in Ebene, Mauritius.

Before AFRINIC was formed, IP addresses (IPv6 and IPv4) for Africa were distributed by the Asia-Pacific Network Information Centre (APNIC), the American Registry for Internet Numbers (ARIN), and the RIPE NCC. ICANN provisionally recognized AFRINIC on 11 October 2004.[5] The registry became operational on 22 February 2005. ICANN gave it final recognition[6] in April 2005.

Organizational structure

[edit]

Board of directors

[edit]

AFRINIC consists of a nine-member Board of Directors.[7] Six of the directors are elected to represent the different sub-regions, while two directors are elected to serve on the Board-based solely on competency as opposed to regional representation. The last seat on the Board is filled by the Chief Executive Officer.

Elections are held at each AFRNIC Annual General Meeting (AGMM), which is conducted around May/June every year. Voting takes place both on-site at these meetings and prior to the meeting via online voting.

Council of Elders

[edit]

The AFRINIC Council of Elders consists of six former AFRINIC chairpersons.

They fulfill an advisory role and harness all their experience leading the organization as former Chairs.

The Members of the AFRINIC Council of Elders are:

  1. Dr. Nii N. Quaynor (AFRINIC Board of Trustees Chair: 2001–2004)
  2. Mr. Pierre S. Dandjinou (AFRINIC Chair: 2004–2008) Board Member: 2004-2010
  3. Dr. Viv Padayatchy (AFRINIC Chair: 2008–2011) - Board Member: - 2005-2011
  4. Mrs. Maimouna Ndeye Diop Diagne (AFRINIC Chair: 2011–2012) - Board Member: 2010-2013
  5. Dr. Christian Bope

AFRINIC Staff

[edit]

AFRINIC Staff carry out the daily operations of the organization.

The Staff is structured in nine departments: CEO's Office, HR and Administration, Research and Innovation, Finance and Accounting, External Relations, Communication and Public Relations, Member Services, IT and Engineering, and Capacity Building. These divisions encompass all AFRINIC activities, including that of acting as a central source of information for members.

AFRINIC's open policy development process also invites stakeholders interested in Internet number resources from around the world, primarily from the African region, to participate. These include representatives from governments, regulators, educators, media, the technical community, civil society, and other not-for-profit organizations.

Public Policy Meeting

[edit]

Each year, AFRINIC conducts two public policy meetings. These give the community the chance to come together for policy development, information sharing, and networking. The first Public Policy Meeting of each year is known as the Africa Internet Summit (AIS), and the second is held as a standalone meeting. The meetings are held in various locations throughout Africa.

Controversies and scandals

[edit]

AFRINIC has been at the center of several organizational controversies in the past five years.

Corruption

[edit]

A former senior management member from AFRINIC, Ernest Byaruhanga, committed what is tagged to be Africa's greatest internet heist. In total, 4.1 million IP addresses were stolen. 2.3 million came from AFRINIC's “free pool” and a further 1.7 million were “legacy” IP addresses. They were worth around $87M, according to MyBroadband. IPv4 addresses, which were already reserved and in use by major organizations were effectively hijacked and sold. These reappropriated IP addresses were used to forward spam, breach data records, and compromise functioning websites. Dozens of South African-based companies and businesses were impacted. Education sectors and the Department of Defence were also hit, losing addresses worth approximately $5.3M.

Sexual harassment and bullying complaint

[edit]

In March 2018, allegations were filed by the RIR's former head of external relations, Vymala Poligadu. She alleged that the Board chair, VC and the head of financial department had been actively plotting to get her fired from her position. She also alleged that one of the staff had been sexually harassed by Afrinic's former chair Sunday Folayan.

The internal report detailing Poligadu's accusations was then leaked onto the organization's discussion mailing list by an anonymous poster, writing in response to a complaint by another member about high staff turnover.

The independent Investigation Committee's (IC) report concluded that the allegations were false and the chair breached the NDA of Board members; Sunday Folayan quit after the Investigation Committee proved that he breached the signed NDA of AFRINIC Board members.[8]

Lawsuits

[edit]

Lawsuit due to senior management's corruption

[edit]
Afri Holdings Ltd & Others vs AFRINIC
[edit]

In June 2020, AFRINIC was taken to court by one of the men whose name and company have been linked to the heist of the African Internet resources committed by a founding member of AFRINIC, Ernest Byaruhanga. In a notice sent to individuals and organizations that hold IP addresses in the African region, the then AFRINIC CEO Eddy Kayihura stated that an application for an interim injunction against AFRINIC was brought before the Commercial Division of the Supreme Court of Mauritius. The application was lodged by Afri Holdings Ltd, Netstyle A. Ltd, and Elad Cohen. Internet investigator Ron Guilmette has linked Netstyle and Cohen's e-mail address to suspicious activity in South Africa, caused by large chunks of South African Internet Protocol address space, worth millions of dollars on the open reseller market, being stolen by AFRINIC's ex-top senior executive Ernest Byaruhanga. Affected IP addresses included a block that belongs to Sasol, and blocks that appear to belong to Tredcor, Afrox, Woolworths, and SITA. Documents obtained in August 2019 also showed that Cohen is a director and shareholder of Afri Holdings Ltd.[9][10]

Logic Web Inc vs AFRINIC
[edit]

On 1 October 2021, Logic Web Inc initiated an application for an interim injunction against AFRINIC. LogicWeb Inc has received a 196.52.0.0/14 block under the registered name of "ITC", which is a made-up name for a fake corporate entity that never existed, and one that was invented by the ex-AFRINIC senior management Ernest Byaruhanga as a WHOIS cover story for his IP addresses famous heist. The 196.52.0.0/14 block was another one of AFRINIC's senior management's thefts from the free pool and one that was subsequently sold or gifted to the proprietor of LogicWeb, Inc. of New York, USA, i.e. a certain Mr. Chad Abizeid. Sometime after Mr. Chad Abizeid received the 196.52.0.0/14 block that was stolen by Ernest Byaruhanga, which is worth well over $5 million, Mr. Abizeid tried to sell off the entire thing at once. Before recently reclaiming the stolen Internet Resources, the ex-CEO AFRINIC CEO, Eddy Kayihura, has known about the misappropriated 196.52.0.0/14 block for quite some time without taking any actions of reclaiming it, in potential with corruption from Mr. Abizeid, similar to the AfriHoldings lawsuit case.

AFRINIC's scandal of committing the biggest Internet Resources heist, valued at more than 50 million dollars, is still affecting businesses operations that are struggling to recover from AFRINIC's attempts of concealing the gravity of the thefts by reclaiming the stolen IP resources, with little to no consideration of the consequences on the African Internet Connectivity. These businesses are now taking the matter to the Mauritius Courts by filing lawsuits against AFRINIC's management.[11]

[edit]
Cloud Innovation Ltd vs AFRINIC
[edit]

AFRINIC has been in a feud with Cloud Innovation (CI) since July 2021, as it intended to revoke over 6 million IP addresses from the company backing the claim by stating a breach in policy. However, Afrinic's attempt to seize IP addresses currently under Cloud Innovation's domain backfired, as by bringing the issue directly to court, without an effort to de-escalate the matter, the RIR did not follow its own in-house policies.

As a result of the unfounded claims advanced by Afrinic, the Supreme Court of Mauritius ordered that Afrinic bank accounts be frozen, thereby crippling its operations. On 15 July, due to court order, Afrinic restored CI's IP address blocks. However, the RIR's bank assets remained frozen until 15 October, when they were granted the removal of the freezing order against AFRINIC in the Mauritius Court. The litigation is still ongoing[citation needed].

With the amount of IP addresses involved and Cloud Innovation's large international customer base, this litigation is said to be potentially impacting a large majority of the Internet's connectivity and operations. Internet professionals all over the world have raised concerns about the possible consequences that would result from Cloud Innovation's membership being possibly terminated[citation needed].

In 2022, Cloud Innovation won in court against AFRINIC, with a Supreme Court Judge ruling in favor of the plaintiff, CI, and against AFRINIC. The Supreme Court Judge concluded that the lawsuits were caused by the registry's dogged “determination… to terminate (the plaintiff’s) membership.” At the same time, the judge found no evidence of the lawsuits being indeed vexatious, asking how “in these circumstances… can it be held against the applicant […] that it resorted to the court to preserve its rights?”[12]

Africa on Cloud (PTY) Ltd v Afrinic
[edit]

An Injunction has been issued against AFRINIC's board's illegal attempt to extend Director's term, In particular, board seat number 6 is currently being held by Abdalla Omari.[13] This seat was given to Mr. Omari through the passing of an illegal resolution to extend a board member's office without an election.

Crystal Web (Pty) Ltd v AFRINIC
[edit]

An order has been granted to Crystal Web, one of resources member of AFRINIC,[14] to suspend the CEO of AFRINIC, Eddy Mabano Kayihura, after he tried to censor the community discussion list of AFRINIC[15] because a resource member had uncovered information linking the CEO with a known terrorist supporter.[16] Furthermore, Eddy has been the subject of many controversial and corruptions allegations over the short 2 years since he was in the office.[17] During his tenure as CEO, nearly 50 lawsuits have been filed against AFRINIC, with AFRINIC having been sued by over 8 different parties, including internal parties.[18]

Lawsuit by suspended CEO Kayihura Mabano Eddy against AFRINIC

[edit]

In July 2022, Eddy Kayihura tried to bypass member-based elections by the ATU to appoint directors though the court,[19] thereby violating the bottom-up process in which the RIR is built on and hampering the intended effect of the internet self-governance model.[20]

Interfere with rule of law and its home nation's sovereignty

[edit]

The other four RIRs sent a letter in the name of Number Resources Organization (NRO) to the Mauritius government requesting government recognition of AFRINIC's international status.[21]

This letter was not received well by the global community, and Sander Steffan, one of the NRO's number council members, described such a move as "neo-colonialism".[22]

A formal board member of AFRINIC, CTO of Liquid Labs, also sent a letter to the Mauritius government requesting that they not act on the NRO letter by stating "please disregard it in its entirety and that the legal process be allowed to play out as per the Mauritian legal system".[23]

International media at large has also been against this letter with one media personality calling it "causing collateral damage". Another referenced such action as a top-down approach (contradicting to bottom-up approach RIR was founded on) and questioned why RIR resisted the ITU proposal to take them over in the immunity is what they want.[20]

The NRO letter called Cloud Innovation a vexatious litigant, but a week later a judgment from the supreme court was delivered that specifically noted Cloud Innovation is not a vexatious litigant. The judgement criticized AFRINIC for trying to pervert the course of justice.[24]

IPv4 exhaustion

[edit]

In April 2017, AFRINIC became the last regional Internet registry to run down to its last /8 block of IPv4 addresses (102/8), thus triggering the final phase of its IPv4 exhaustion policy. As a result, AFRINIC then implemented a soft landing policy for allocating the last /8 to its users, in which, since Phase 2 of the exhaustion period (started in January 2020[25]), each AFRINIC customer is eligible for just one final maximum allocation of a /22 block of IPv4 addresses until the block is exhausted.[26]

AFRINIC training

[edit]

AFRINIC conducts a number of training courses[27] in a wide variety of locations[28] around the region. These courses are designed to educate participants to proficiently configure, manage and administer their Internet services and infrastructure and to embrace current best practices.

WHOIS database

[edit]

The AFRINIC WHOIS Database[29] contains registration details of IP addresses and AS numbers originally allocated by AFRINIC. It shows the organizations that hold the resources, where the allocations were made, and contact details for the networks. The organizations that hold those resources are responsible for updating their information in the database. The database can be searched by using the web interface on the AFRINIC site or by directing your whois client to whois.afrinic.net (for example, whois -h whois.afrinic.net 196.1.0.0/24).

The AFRINIC membership

[edit]

Major[30] Internet Service Providers (ISPs), Internet exchange point (IXPs), governments and academic institutions.

Policy development process

[edit]

AFRINIC's policies are developed by the membership and broader Internet community. The major media for policy development are the face-to-face Public Policy Meetings,[31] which are held twice each year, and mailing list discussions.

AFRINIC's policy development process[32] is:
Open Transparent Bottom-up
Anyone can propose policies. AFRNIC publicly documents all policy discussions and decisions. The community drives policy development.
Everyone can discuss policy proposals. AFRINIC documents all policy discussions and decisions to provide complete transparency of the policy development process.

Economies

[edit]

AFRINIC's service region[33] is divided into six sub-regions in Africa for statistic gathering purposes and for Board of Directors elections to ensure regional representation.

These sub-regions are: Northern, Western, Central, Eastern, Southern and the Indian Ocean.

AFRINIC's service region also includes several islands located in the Atlantic Ocean which are listed in the Western or Central African regions.

EASTERN REGION WESTERN REGION CENTRAL AFRICA NORTHERN AFRICA SOUTHERN AFRICA INDIAN OCEAN
Burundi Benin Cameroon Morocco Angola Mauritius
Djibouti Burkina Faso Central African Republic Egypt Botswana Réunion
Eritrea Cape Verde Democratic Republic of the Congo Libya Lesotho Comoros
Ethiopia Côte d'Ivoire Equatorial Guinea Algeria Namibia Mayotte
Kenya Gambia Gabon Sudan South Africa Madagascar
Tanzania Ghana Republic of the Congo South Sudan Swaziland Seychelles
Rwanda Guinea São Tomé and Príncipe Tunisia Mozambique
Somalia Liberia Chad Mauritania Malawi
Uganda Mali Zambia
Niger Zimbabwe
Nigeria
Senegal
Sierra Leone
Togo

See also

[edit]

References

[edit]
  1. ^ "Board of Directors". 19 October 2023. Archived from the original on 20 May 2024. Retrieved 20 May 2024.
  2. ^ "The AFRINIC Team". Archived from the original on 20 May 2024. Retrieved 20 May 2024.
  3. ^ "RIR Governance Matrix | The Number Resource Organization". www.nro.net. Archived from the original on 17 July 2018. Retrieved 17 July 2018.
  4. ^ "AFRINIC Contact Details". afrinic.net. Archived from the original on 17 July 2018.
  5. ^ "AFRINIC Provisional Approval by ICANN". icann.org. Archived from the original on 29 March 2019.
  6. ^ "IANA Report on Recognition of AfriNIC as a Regional Internet Registry". iana.org.
  7. ^ "Appointment of Directors as per AFRINIC Bylaws". afrinic.net. Archived from the original on 18 July 2018.
  8. ^ "Archived copy" (PDF). Archived (PDF) from the original on 10 July 2024. Retrieved 10 July 2024.{{cite web}}: CS1 maint: archived copy as title (link)
  9. ^ https://mybroadband.co.za/news/internet/363694-man-connected-to-african-ip-address-heist-sues-afrinic.htm/ [dead link]
  10. ^ "List of Court Cases involving AFRINIC - AFRINIC - Regional Internet Registry for Africa". afrinic.net. Archived from the original on 21 December 2021.
  11. ^ "[afnog] [Community-Discuss] Updates on the misappropriation of IPv4 resources". afnog.org. Archived from the original on 20 January 2021.
  12. ^ "AFRINIC loses legal battle in Mauritius' highest court". 16 August 2022.
  13. ^ "[Community-Discuss] Interim order of June 14th 2022". Lists.afrinic.net. 15 June 2022. Retrieved 18 September 2022.
  14. ^ "Supreme Court - Crystal Web vs Afrinic & Eddy Kayihura" (PDF). afrinic.net. Archived (PDF) from the original on 25 March 2023. Retrieved 2 April 2023.
  15. ^ "[Community-Discuss] Temporary emergency moderation". Lists.afrinic.net. 24 June 2022. Archived from the original on 30 June 2022. Retrieved 18 September 2022.
  16. ^ "[Community-Discuss] NRS Official Response to Amin Dayekh allegation highlighting concerns around potential terrorism funding and support". Lists.afrinic.net. 24 June 2022. Archived from the original on 30 June 2022. Retrieved 18 September 2022.
  17. ^ "The Downfall of AFRINIC under the Corrupt Leadership of Eddy Kayihura". 8 July 2022. Archived from the original on 23 August 2022. Retrieved 23 August 2022.
  18. ^ "List of Court Cases involving AFRINIC". 24 October 2023. Archived from the original on 30 July 2022. Retrieved 23 August 2022.
  19. ^ "Exposed: Suspended CEO in secret appeal calling for ATU interference". 22 July 2022. Archived from the original on 23 August 2022. Retrieved 23 August 2022.
  20. ^ a b "IP-Adressen: Rechtsstreit um Afrinic gefährdet Selbstverwaltung". 22 July 2022. Archived from the original on 23 August 2022. Retrieved 23 August 2022.
  21. ^ "NRO Letter to Mauritius Government | the Number Resource Organization". Archived from the original on 23 August 2022. Retrieved 23 August 2022.
  22. ^ "[members-discuss] NRO letter to Mauritian Government members-discuss — RIPE Network Coordination Centre". Archived from the original on 23 August 2022. Retrieved 23 August 2022.
  23. ^ "A Rebuttal to the NRO's letter to the Mauritian Government". Archived from the original on 23 August 2022. Retrieved 23 August 2022.
  24. ^ "Interlocutory judgement" (PDF). afrinic.net. Archived (PDF) from the original on 30 March 2023. Retrieved 2 April 2023.
  25. ^ "AFRINIC enters IPv4 Exhaustion Phase 2". afrinic.net. 13 January 2020. Archived from the original on 23 June 2021. Retrieved 26 June 2021.
  26. ^ "AFRINIC Enters IPv4 Exhaustion Phase 1". afrinic.net. 3 April 2017. Archived from the original on 26 June 2021. Retrieved 26 June 2021.
  27. ^ "AFRINIC Learn Portal". learn.afrinic.net. Archived from the original on 17 July 2018.
  28. ^ "AFRINIC Onsite Traininf Locations". learn.afrinic.net. Archived from the original on 17 July 2018.
  29. ^ "AFRINIC WHOIS Database Web Query Tool". afrinic.net.
  30. ^ "AFRINIC Membership Statistics". afrinic.net. Archived from the original on 17 July 2018.
  31. ^ "Guide to Hosting AFRINIC Meetings" (PDF). afrinic.net. AFRINIC. Archived (PDF) from the original on 17 July 2018. Retrieved 17 July 2018.
  32. ^ "AFRINIC Policy Development Process (PDP)". afrinic.net. AFRINIC. Archived from the original on 9 November 2017. Retrieved 17 July 2018.
  33. ^ "AFRINIC Service Region". afrinic.net. Archived from the original on 17 July 2018.
[edit]

20°14′42″S 57°29′30″E / 20.2450°S 57.4916°E / -20.2450; 57.4916