A receiver is not appointed to a regional internet registry because the internet has stopped routing. Packets may still move. Prefixes may still be visible in the global table. Reverse DNS may still answer. Route-origin data may still be consumed by networks that never read a court filing. Members may still need invoices, tickets, allocations, transfers, account access, certification services and public records. The crisis is quieter than a network outage. It begins when the ordinary corporate organs behind the registry can no longer supply the authority that lets the registry act.
That is why AFRINIC's experience with receivership matters beyond one African institution and beyond one long conflict over IPv4 resources. It shows what happens when a private membership company becomes the local operating shell for a public coordination function. The company has directors, bank accounts, employees, bylaws, creditors, litigants and voting members. The function has wider dependencies: uniqueness of number resources, reliability of registration data, continuity of RPKI, reverse-DNS and Whois or RDAP services, and confidence among operators, buyers, lessors, lenders and global coordination bodies. Receivership is the bridge that appears when those two realities no longer line up.
The economic question is sharper than the legal label. Is emergency continuity a fire brigade, proving that court-supervised private governance can rescue itself when a registry is close to institutional paralysis? Or is it the price paid after ordinary governance has failed to keep boards, accounts, elections and legitimacy in working order? The answer is both. A court officer can preserve value, organise elections, protect staff continuity and stop a registry crisis from becoming a service crisis. Yet the need for such a device also reveals that the ordinary model had no cheap, credible way to handle board failure, bank disruption and disputed authority before they reached a judge.
AFRINIC is a natural stress case because public reporting has linked its recent history to several kinds of institutional strain at once: allegations of address-record manipulation, a large conflict with Cloud Innovation over IPv4 resources and use conditions, litigation that affected financial capacity, years without normal board continuity, court-supervised administration in Mauritius, an attempted election in 2025 that was suspended and annulled amid concerns over voting authority and powers of attorney, a later board election, efforts to rebuild budgets and staff capacity, and further litigation around the institution's path. None of those facts resolves every contested claim. Together they show how a registry crisis travels. What begins as a conflict over records, contracts or elections can reach bank accounts, board authority, staff morale and global recognition.
This lens is deliberately narrower than due process and appeals. The due-process question is what safeguards should protect a holder when the registry proposes an adverse decision. It is also distinct from dispute-resolution economics, where the central question is how contested claims should be classified, reviewed and contained. Emergency continuity asks a later and more institutional question: what happens when the registry itself no longer has the ordinary organs needed to make decisions, pay bills, run elections, satisfy counterparties or reassure the global numbering system? At that stage the problem is not one decision and not one forum. It is the survival of the institutional shell that keeps the ledger alive.
For markets, the distinction matters. A scarce IPv4 block is valuable partly because the holder expects the relevant registry to remain recognised, solvent enough to operate, technically capable, legally legible and procedurally predictable. A court-supervised backstop can keep that expectation from collapsing. Yet the appointment itself sends a signal. If the registry needs emergency authority to maintain continuity, resource holders learn that registry risk is not theoretical. It is part of the asset discount, part of the lease margin, part of transfer due diligence and part of the question every operator asks before relying on a record.
A backstop appears when governance cannot sign the cheque
Ordinary registry governance is supposed to be dull. Members elect a board. The board appoints or supervises management. Management signs contracts, pays staff, maintains systems, processes tickets, publishes records, reports to members and interacts with peer institutions. The technical work may be complex, but the authority chain should be boring. The board exists. The bank accepts signatories. Staff know who can approve spending. Members know where to challenge policy. External bodies know who represents the registry.
Emergency administration appears when this chain fails badly enough that ordinary repair is no longer credible. A court-supervised officer does not merely add another committee. The officer supplies temporary authority where the company cannot supply it through normal organs. That authority can preserve assets, maintain business value, convene or supervise elections, protect staff functions, interact with banks and report back to the court. In AFRINIC's case, the public statement by the Number Resource Organization in September 2023 described a receiver appointed under Mauritian company law, with a mandate to maintain the status quo of assets, preserve business value, oversee a board election, help form a proper board and appoint a chief executive within a defined period, subject to court extensions.
The language sounds administrative. Economically, it is extraordinary. A registry is not a shop whose inventory can be locked while owners argue. It is the recognised recordkeeper for number resources across a service region. If the ordinary company cannot operate, the harm can spill into address allocation, transfers, public records, reverse DNS, RPKI, contracts with service providers and participation in global coordination. Emergency authority therefore preserves more than a company. It preserves the public-facing function housed in that company.
This is why the cheque matters. The ability to pay a cloud provider, office lease, insurer, counsel, election vendor, auditor or employee is not separate from registry continuity. A technically competent registry can become fragile if it cannot operate its accounts. A boardless registry can still have engineers, databases and tickets, but sooner or later someone must approve salaries, renew contracts and answer banks. Litigation that freezes or clouds accounts is not just a financial dispute. It is a threat to the routine repetition on which critical services depend.
The presence of a lawful officer can reassure counterparties because it supplies a recognised person to act where corporate authority is disputed. Banks like clear authority. Vendors like payment assurance. Staff like a lawful chain of instruction. Courts like a named officer accountable to the court. Members may dislike the loss of ordinary control, but they also benefit if services continue. This is the firefighting function: stop the institution from burning while the ownership, board and election questions are sorted.
Yet firefighting has an implied invoice. If a registry needs court-supervised authority to sign the cheque, the ordinary constitution of the registry has already failed in an economically significant way. Members who pay fees have lost the low-cost assurance that their elected structure can govern. Resource holders have discovered that registry continuity depends not only on engineers and databases, but also on insolvency practice, judicial timetables, bank compliance and the ability of elections to survive challenge. Emergency continuity is useful precisely because the system underneath it has become unsafe.
The first institutional lesson is therefore not heroic. It is mundane. An RIR's constitution must treat payment authority, signatory succession and minimum service finance as core registry functions. If bank access is left to normal company routines until a crisis, the institution has already exposed the ledger to a risk that has little to do with routing or database engineering. A public coordination function can be endangered by the most ordinary corporate failure: nobody can credibly sign.
Continuity is not consent
The backstop's greatest virtue is also its limit. Court supervision can keep the institution functioning, but it cannot manufacture the member consent that ordinary governance lost. It can say who has temporary authority. It cannot make the membership believe that past disputes were handled properly, that future decisions will be neutral, or that board legitimacy has been fully repaired. Continuity and legitimacy overlap, but they are not the same asset.
This distinction matters because official and institutional reactions to receivership often describe it as a resilience mechanism. That description is partly right. A court-appointed officer can prevent a private governance failure from disabling a registry function. The mandate can restrain relocation or control changes, preserve business value, run an election timetable, protect staff and give peer registries a responsible counterparty. If the alternative is institutional drift with no board and no reliable authority, the backstop is rational.
But the backstop should not be confused with a healthy system. It does not dissolve conflict between members, large holders, policy factions, courts, banks, global coordination bodies and regional political interests. It narrows the immediate danger. In AFRINIC's case, the attempted June 2025 election under receivership illustrates the point. The receiver arranged an electoral process after years without ordinary board function. Voting proceeded, then was suspended and annulled after concerns over powers of attorney, proxy authority and voting documentation. ICANN raised concerns. South African industry voices alleged serious irregularities. The intervention did not end the trust problem; it exposed how deep the trust problem had become.
The later election that produced a board in September 2025 changed the institutional picture. Public reporting described eight directors elected, a chance to convene a board for the first time since 2022, and subsequent efforts to rebuild budget and strategic planning. By early 2026 AFRINIC representatives were describing improved staff morale, interim management appointments, work on an action plan and a multi-year strategy. These are signs of recovery. They do not erase the lesson of receivership. They show that temporary authority can help create conditions for ordinary authority to reappear.
The weakness is that lawful process can become valid before it becomes trusted. A supervised election may follow the best available timetable, but members can still dispute voter eligibility, proxies, powers of attorney, nomination rules, conflicts, foreign influence or the relationship between resource membership and corporate control. A court can approve or refuse challenges, but each ruling may be read by factions as tactical victory rather than shared settlement. The institution remains alive, while the cost of consent has risen.
This is why emergency continuity cannot be the main governance design for a registry. It is too slow, too expensive and too dependent on local corporate law to serve as normal legitimacy. Members should not need a judge to know when the board can meet. Banks should not need a court officer to know who can sign. Global bodies should not need emergency letters to understand who represents a regional registry. The stabiliser is not a democratic substitute. When it is needed, the institution should ask why member control failed to produce lawful continuity before court intervention became necessary.
The economic lesson is that legitimacy has two layers. The first is legal authority: who can act today, under which order, with which power? The second is confidence: why should operators, members and counterparties believe that tomorrow's decisions will be fair, stable and reviewable? Court supervision can provide the first layer. It can create the second only indirectly, by preserving enough continuity for reforms, elections and disclosure to work. If those reforms do not follow, the registry leaves the emergency with the same risk premium that brought it there.
AFRINIC exposes the dual character of the RIR
A regional internet registry is often described as a private, member-based, non-profit technical organisation. That description is formally important and partly true. AFRINIC is incorporated in Mauritius, has members, fees, corporate documents and a service region covering Africa and parts of the Indian Ocean. It manages IPv4, IPv6 and autonomous system number resources and provides associated registry services. It is not a ministry, not a treaty organisation and not a bank.
Yet receivership shows why the private-company description is incomplete. If an ordinary membership company enters court administration, the effects are usually contained by contract and property law. Creditors, employees, customers and owners may lose money, but the wider public normally has alternatives. A regional internet registry is different. It sits inside a global uniqueness system. The numbers it records are not locally interchangeable commodities. Other networks, security tools, customers, brokers, courts and peer registries rely on its records as part of a global coordination arrangement.
The result is a hybrid. The registry has private legal form but public-infrastructure effects. It is accountable to members in one sense, yet non-members also depend on it. End users do not vote in RIR elections, but they depend on networks that use registered resources. A buyer of a company with address-dependent revenue may not be an AFRINIC member, but the price paid depends on the reliability of AFRINIC recognition. A lender may not care about internet governance, but it cares whether the borrower's network inputs can survive corporate stress. A peer registry may have no vote in Mauritius, but it cares whether uniqueness and cross-registry commitments remain stable.
Receivership makes the hybrid visible because the court must decide what exactly is being preserved. Is the emergency officer preserving a Mauritian company, a pool of assets, an election process, a set of member services, a continental coordination function, or an element of the global numbering system? In practice the answer is all of these. Each has different economics. Preserving the company protects employees and contracts. Preserving member services protects operators. Preserving the ledger protects markets. Preserving global coordination protects the credibility of the five-RIR system. The acts of the court officer cannot be understood if only one layer is seen.
This hybrid character explains why outside bodies become involved. The NRO's 2023 statement welcomed receivership because it saw a path back to functional governance and continued registry services. ICANN later raised concerns over election integrity and possible emergency arrangements if dysfunction persisted. Peer registries and the NRO also worked on revising ICP-2 so the life cycle of an RIR would include assistance, crisis handling and possible derecognition. None of that is normal for a mere trade association. It happens because the private entity is carrying a public coordination function.
Global concern creates its own tension. If external bodies press too hard, local members may see a private club of incumbent registries trying to protect its model. If courts treat AFRINIC only as a local company, global continuity risks may be underweighted. If members treat AFRINIC only as a member company, non-member reliance disappears from view. If global bodies treat it only as infrastructure, local consent is weakened. Emergency continuity is therefore a constitutional lesson in disguise: the RIR model needs rules that reflect its dual character before crisis forces courts, global bodies and members to improvise.
The lesson is not that an RIR should become a state body. Nor is it that private member control should be absolute. The lesson is that private form and public function must be aligned. A registry that can affect scarce-resource markets, routing security, reverse DNS and regional development cannot be governed as if only dues-paying members bear the consequences. A registry that depends on member legitimacy cannot be rescued by global coordination bodies as if local corporate consent is a formality. Receivership makes both simplifications untenable.
The ledger is the asset that must survive the quarrel
When people discuss emergency continuity, they often focus on boards, elections and bank accounts. Those are vital. But the economic asset at the centre is the ledger: the authoritative public record of resource registration and associated services that lets others rely on uniqueness, contactability, delegation and recognised control. If the ledger remains stable, many disputes can be fought without immediate network harm. If the ledger becomes unreliable, the cost spreads faster than the court file.
Ledger continuity has several layers. The first is data integrity: records should not be lost, corrupted, manipulated or changed without authority. The second is service continuity: RDAP, Whois, reverse DNS, RPKI and member systems should keep working unless a specific, justified restraint applies. The third is legal continuity: counterparties should know which entity and which officer can bind the registry. The fourth is market continuity: transfers, leases, financings and customer contracts should not be clouded by institutional uncertainty unrelated to the specific resource.
Receivership is useful because it can freeze the institutional position while preserving the operational record. The court can maintain the status quo, restrain asset relocation or control changes, and keep services functioning while a board is reconstituted. In a registry crisis, that is the equivalent of keeping settlement infrastructure open while the ownership of the operator is disputed. The market does not need every political question solved immediately. It needs to know that the record will not be altered by a faction, a bank freeze, a missing board quorum or a contested election.
AFRINIC's history shows why this matters. Allegations of earlier address-record manipulation raised questions about data controls and insider access. The Cloud Innovation dispute raised questions about the scope of registry power over large IPv4 holdings. Election disputes raised questions about who could control the board. Financial litigation raised questions about whether the institution could pay and operate. These are different problems, but all threaten ledger confidence if not isolated. A backstop can help isolate them by preserving the last lawful operational state and preventing institutional control fights from spilling into records.
The danger is that emergency continuity can preserve too much if it becomes mere stasis. A registry is not only a historical archive. It must process legitimate tickets, update contacts, issue resources where policy allows, record transfers, maintain RPKI and reverse DNS, and help members keep records accurate. If everything is frozen to avoid controversy, the company may be preserved while the market degrades. If the emergency officer moves too aggressively, substantive registry policy may be decided without member consent. The right standard is not paralysis and not activism. It is continuity with narrow authority.
That standard should separate contested changes from routine functions. If an election is challenged, routine registry services should continue. If a resource holder is in dispute, unrelated holders should not suffer. If a transfer is contested, the transfer can be paused while existing records and publication services continue. If bank authority is disputed, payroll and critical vendors need protected payment routes. If board legitimacy is disputed, staff should still have lawful operating instructions. The backstop's value lies in building walls between the crisis and the ledger.
For IPv4 markets, those walls are not merely operational. They affect price. A buyer discounts resources if a registry crisis can cloud unrelated transfers. A lessor charges more if publication services might be affected by litigation. A lender reduces confidence if registry authority depends on unresolved corporate control. Strong ledger continuity lowers those discounts by making institutional distress less contagious. Weak continuity makes the registry itself a risk layer above every resource it records.
Board failure is a market event
Board failure sounds like corporate governance housekeeping until a registry is involved. In an ordinary company, a failed board may delay strategy, hiring, accounts and shareholder decisions. In a regional internet registry, it can delay policy development, fee decisions, executive appointments, budget approvals, legal strategy, service investments, contract renewals, member confidence and participation in global coordination. A boardless registry is not merely untidy. It is less capable of making the routine commitments that markets need.
AFRINIC operated for years without ordinary board continuity. Public reporting described the inability to appoint a board or chief executive, as well as limits on carrying out functions. That condition has economic consequences even if servers remain online. Staff may continue heroic daily work, but large decisions become harder. Can the registry approve a budget? Can it hire senior management? Can it approve a settlement? Can it adopt election reforms? Can it assure a bank that signatories are valid? Can it respond credibly to global coordination concerns? Can it finance system upgrades? Can it make policy without inviting new challenges?
Members also face an incentive problem. In theory, member control is the democratic anchor of the registry. In practice, member voting can become a high-stakes control market when the registry influences scarce IPv4 assets, transfer rules, fees, publication services and enforcement posture. Voting authority, powers of attorney, proxy rules and eligibility are then no longer procedural details. They are control instruments over an institution that controls recognition. The 2025 election disputes, including allegations around voting documentation and proxy authority, show how board elections can become part of the same scarcity economy as IPv4 holdings.
The emergency route is designed to get past this deadlock by creating a lawful path to elections. But the process reveals a paradox. The court officer must restore member control by supervising a process in which member control is itself disputed. Every choice matters: who is eligible to vote, who may hold a proxy, who verifies authority, who screens candidates, how conflicts are disclosed, how ballots are audited, who explains annulment, and how courts handle challenges. If those details are weak, an election may formally reconstitute the board while failing to create confidence.
The cost of board failure is paid by more than candidates. Operators pay through uncertainty over processing capacity and policy direction. Staff pay through stress and unclear authority. Banks and vendors pay through higher diligence. Buyers of IPv4 resources pay through due-diligence discounts. Global coordination bodies pay through contingency planning. Smaller members pay through reduced ability to influence outcomes unless they can navigate complex voting and documentation rules. A board crisis is therefore a market event because it alters expected control over the registry layer.
The September 2025 election and subsequent board activity show the upside of repair. A board can approve budgets, appoint interim management, develop strategy and signal that the institution has moved from survival to planning. Public reporting from early 2026 described improved morale and budget work as evidence of movement. But the durability of that recovery depends on whether the board is seen as lawful, representative and constrained. A board that exists only because an emergency process barely survived challenge may still face a confidence deficit. A board that pairs election repair with transparent authority rules can reduce the risk premium.
The design lesson is straightforward. Registry constitutions should treat board failure as a continuity risk, not a local embarrassment. They need pre-crisis rules for quorum collapse, vacant seats, emergency spending, election supervision, voter authority checks, conflict disclosure, independent scrutineers and member communications. Waiting for receivership means waiting until the market has already learned that the ordinary governance bargain was too thin.
Banking continuity is the boring core of confidence
The most revealing part of a registry crisis may be the bank account. Policy debates use grand language: stewardship, self-governance, multistakeholder legitimacy, regional development, technical coordination. But a registry that cannot use its accounts cannot remain boring for long. Salaries, vendors, insurance, hosting, audits, legal bills, travel, election services and member systems all require payment. Banking continuity is the infrastructure behind infrastructure.
AFRINIC's public crisis included litigation that affected its financial capacity and reporting that its bank accounts or access to funds became a central issue. Later reporting after the 2025 board election described the new board as needing to seek access to frozen accounts and resume work. These facts matter because they expose a weakness in the registry model. The value of the ledger may be continental and global, but its operating cash can be trapped by local legal process, signatory disputes and creditor tactics.
From an economic perspective, this creates a mismatch between external reliance and local enforceability. Operators across the service region depend on AFRINIC's continuity. Peer registries depend on the stability of the RIR system. Yet a bank in the incorporation jurisdiction must follow local legal authority and risk rules. If signatories are disputed or a court order affects accounts, the bank cannot simply say that number-resource continuity is important. It needs lawful instructions. Court supervision supplies those instructions, but only after the crisis reaches a legal threshold.
This is why financial continuity should be designed before crisis. A registry should have protected reserves, emergency spending authority, audited signatory succession, vendor-continuity plans, insurance, preapproved critical-service payment routes and clear rules for how litigation expenses are disclosed to members. None of this is glamorous. It is the difference between a legal dispute and an operating failure. If counsel bills, staff payroll and service vendors all compete for uncertain cash, the registry's institutional position deteriorates quickly.
Banking continuity also affects incentives. If a large litigant can impose costs on the registry by freezing funds or forcing expensive proceedings, the litigant gains leverage beyond the merits. If the registry can spend member funds on open-ended legal conflict without transparent discipline, the registry gains leverage funded by captive members. Both sides can create moral hazard. A court officer can reduce the worst immediate danger by protecting core payments, but the deeper answer is a financial constitution that separates critical operations from litigation warfare.
The money should therefore be treated by layers. Critical registry services, staff payroll, security operations, insurance, data custody and member-facing systems belong in the highest continuity layer. Election administration and board restoration sit next. Ordinary projects, discretionary outreach and non-essential spending come later. Litigation spending requires separate disclosure and discipline because it can consume funds while claiming to protect the institution. Members need to know whether fees are supporting core continuity or paying for avoidable escalation.
For markets, the bank account is a signal. A registry with stable accounts, audited reserves and transparent authority is lower risk. A registry whose cash can be frozen or whose signatories are contested is higher risk. IPv4 buyers, lessors and lenders may never read the budget, but they will notice delays, fee shocks, service interruptions or public reports of financial incapacity. Confidence is built from such boring facts. The emergency backstop can protect them temporarily; durable design must make them less vulnerable.
Operators rely on service continuity before they rely on speeches
Operators are practical. They care less about institutional rhetoric than about whether services work when needed. Can they update contacts? Can they maintain reverse-DNS delegations? Can RPKI material be published reliably? Can RDAP and Whois answer? Can a transfer ticket be processed? Can a new allocation be reviewed under known rules? Can billing questions be resolved? Can a court order or company reorganisation be reflected without months of confusion?
Receivership matters because it can keep these operational questions from becoming casualties of governance conflict. Public reporting repeatedly noted that AFRINIC staff continued to maintain services during difficult periods, and the NRO publicly thanked staff for keeping operations going. That staff continuity deserves emphasis. Institutions often survive not because their formal governance is healthy, but because staff keep the machinery from failing while boards and litigants argue. Temporary court authority can formalise that survival by giving staff lawful instructions and protecting critical payments.
But operators will not rely indefinitely on heroism. If the registry cannot allocate available resources, process routine requests or answer authority questions because governance is trapped, operators adapt. They delay updates. They seek private workarounds. They demand stronger contractual protections. They use brokers with specialised knowledge. They avoid transactions that depend on timely registry action. They discount AFRINIC-administered resources relative to better understood regions. The visible crisis may be legal; the market response is operational caution.
The 2026 report that AFRINIC still had hundreds of thousands of unallocated IPv4 addresses while rebuilding is economically significant. In a world where IPv4 scarcity drives prices and demand, remaining address inventory is not a trivial administrative stock. It is a scarce input for networks, customers and regional growth. If a registry cannot allocate or manage such resources with confidence because governance is under stress, scarcity becomes more costly. The pool exists, but institutional capacity determines whether it can be used efficiently and trusted after assignment.
Service continuity also extends to negative decisions. Operators need the registry to say no sometimes: no to forged authority, no to defective transfer papers, no to attempts to corrupt records, no to abuse of credentials, no to an instruction that conflicts with a court order. The question is whether the no comes from a stable institution with clear authority or from a distressed institution whose own legitimacy is contested. Emergency authority can make a narrow no more credible by placing it under court supervision, but it cannot supply the long-term standards that operators need.
The practical reliance chain is broader than members. Customers rely on operators. Hosting clients rely on address reputation. Security teams rely on published contacts and route-origin information. Buyers rely on transfer records. Lessors and lessees rely on recognised continuity. Governments rely on public networks. If registry services wobble, the cost travels downstream to actors who never voted, never litigated and may not know what an RIR is.
This is the public-infrastructure side of the AFRINIC lesson. The registry can be a private company, but the harm from failure is not confined to the corporate parties. Emergency continuity recognises that fact by keeping services alive while corporate authority is repaired. Future design should recognise it earlier by requiring continuity plans, escrowed data, service-level commitments, emergency authority maps and public status reporting before a receiver becomes necessary.
IPv4 scarcity makes the backstop more expensive
Receivership would matter even if number resources had no market value. But IPv4 scarcity makes the backstop far more economically charged. Scarcity means that registry recognition affects liquidity, leasing income, transfer price, customer contracts, acquisitions and the cost of capital. A receiver is not preserving a dusty membership association. The office is preserving the institution whose records help define which scarce digital inputs can be used, moved, financed or trusted.
AFRINIC's exhaustion materials describe a region operating under soft-landing rules, with limited remaining IPv4 inventory and need-based allocation constraints. Public reporting in 2026 cited a remaining unallocated pool of 773,376 IPv4 addresses. Whatever the precise daily inventory, the structural point is clear: IPv4 in the AFRINIC region is scarce enough that control, allocation and transfer policies carry economic weight. A governance crisis therefore affects not only institutional reputation but resource mobility.
Scarcity changes how markets read emergency continuity. On one hand, a court-supervised backstop reassures the market that the registry will not simply collapse. Records will be preserved. Staff can keep working. Elections can be organised. Banks and vendors can see legal authority. On the other hand, the need for such a backstop tells markets that registry recognition is exposed to corporate breakdown. A buyer of AFRINIC-administered IPv4 resources cannot ignore the possibility that future governance disputes may delay transfers, alter rules or cloud authority. A lessor cannot ignore the possibility that public controversy around leasing or out-of-region use may intersect with institutional stress. A lender cannot ignore the possibility that registry status has a local-court dimension.
This double signal is the economics of receiver-continuity. Insurance and warning arrive together. The backstop lowers catastrophic risk because it prevents immediate collapse. It raises measured risk because it reveals that collapse was plausible enough to require a backstop. In insurance markets, a building with sprinklers is safer than one without them, but a building that has recently needed the fire brigade is still inspected more carefully. AFRINIC after receivership is similar. The existence of emergency continuity is good; the memory of needing it remains priced.
Scarcity also intensifies distributional conflict. Large holders have more at stake and more resources to litigate. Smaller operators may depend on registry allocations for growth but lack the legal capacity to influence institutional design. Brokers and lessors care about transferability and predictability. Regional policy advocates may worry that scarce African resources leave the region. Global bodies worry that local failure harms the numbering system. Each actor's economic interest is sharpened by scarcity. The emergency mandate must preserve continuity without quietly choosing one scarcity politics over another.
That is difficult because every continuity decision has market effects. If allocations are paused, those waiting for resources lose. If allocations proceed under contested authority, critics may challenge legitimacy. If elections are delayed, governance remains weak. If elections proceed with weak verification, legitimacy is attacked. If bank funds are preserved for operations, litigants may complain. If funds are exposed to claims, services suffer. Emergency continuity is never neutral in its effects; it is only legitimate if the reasons, scope and limits are clear.
The future RIR design question is therefore not whether scarcity should be recognised. It already is recognised by behaviour. The question is whether scarcity risk is handled through improvised litigation or through predesigned institutional separation. A registry can preserve address uniqueness while acknowledging that registry decisions affect valuable reliance. That requires a continuity layer that protects the ledger and core services, a governance layer that restores member authority, and a dispute layer that handles high-value conflicts without capturing the whole institution.
Member incentives change when emergency protection exists
A backstop changes incentives even before acting. Members, litigants, staff, banks and global bodies all behave differently once they know a court can place the registry under supervised continuity. The mechanism reduces the fear that institutional conflict will destroy the registry. It can also reduce the fear of brinkmanship, because actors may believe a court will preserve the function if ordinary governance fails. That belief is useful but dangerous.
The useful side is obvious. If members know that an RIR cannot simply be captured, moved, liquidated or disabled without court scrutiny and global alarm, confidence improves. Staff may remain. Vendors may continue service. Peer institutions may support the recovery. Banks may cooperate with a lawful officer. Resource holders may see that even extreme disputes have a continuity floor. A system with credible emergency protection is more resilient than one that depends entirely on good behaviour.
The dangerous side is moral hazard. If actors believe the court will preserve the registry no matter how destructive conflict becomes, they may take harder positions. A resource holder may litigate aggressively because it expects services to continue under supervision. A registry may resist settlement because it expects global bodies and courts to protect the institution. Members may neglect ordinary governance because emergency repair exists. External bodies may delay creating better rules because the last crisis was contained. The backstop can become a subsidy for weak design.
AFRINIC's experience displays both incentives. Receivership kept the possibility of recovery alive. It also became one more arena for disputes over elections, membership authority, nominations, proxies, corporate registration and the future of the institution. The presence of court authority did not depoliticise the system; it concentrated politics around the mandate. When the June 2025 election failed, the institution remained in limbo not because emergency authority had no power, but because power could not cheaply recreate trust.
Members respond to these incentives in varied ways. Some may seek stability and vote for candidates promising normalcy. Some may align with regional institutions to prevent perceived capture. Some may support challengers who promise radical reconstruction. Some may disengage because voting feels risky or futile. Some may sell or lease resources rather than depend on the registry's future. Some may watch from the sidelines, waiting to see whether services improve. The market is not separate from membership politics; it is one of the reasons those politics are intense.
Emergency continuity should therefore be paired with accountability. The public mandate should be defined, reporting duties should be clear, time limits should be visible, spending should be explained and the separation between preserving the registry and deciding substantive policy should be respected. Members should know what is being preserved, what is being changed, what requires court approval, what requires member approval and what remains outside the temporary role. The more valuable the resources, the more important these boundaries become.
There should also be consequences for avoidable escalation. If registry officials let governance decay until receivership is needed, members should demand explanations. If litigants use court process to impose institution-wide costs beyond the merits, courts and cost rules should notice. If global bodies issue emergency warnings but fail to support durable reforms, they share responsibility for repetition. The backstop should not be free to any actor. Its cost should be visible so that ordinary governance becomes the cheaper path.
Global coordination bodies can certify concern, not legitimacy
AFRINIC's crisis drew concern from ICANN, the NRO and other RIR institutions because the regional registry system is interdependent. Number-resource uniqueness, global policy coordination and confidence in the five-RIR structure cannot be wholly local. If one registry becomes dysfunctional, the others cannot simply shrug. Peer support, emergency recognition rules and lifecycle policies are rational responses.
Yet global coordination bodies face a legitimacy trap. They can identify systemic risk. They can provide information, technical support, financial assistance, policy reform and emergency recognition mechanisms. They can state that registry services must continue. They can help revise ICP-2 to address assistance, lifecycle and possible derecognition. What they cannot do by statement alone is manufacture local member consent or decide every underlying dispute. If they appear to defend the incumbent registry model against local courts or resource holders regardless of merits, they reduce the very legitimacy they seek to protect.
The AFRINIC case made this trap visible. The NRO welcomed receivership as a route to functional governance. ICANN later raised election-integrity concerns, asked questions of the receiver and referenced emergency possibilities if dysfunction persisted. The RIR community examined changes to ICP-2 because older rules said more about creating an RIR than about crisis, assistance or derecognition. These moves were understandable. They also showed how late the formal global safety architecture was. The system had to learn the lifecycle problem during an active crisis.
A better architecture would define roles before personalities and conflicts dominate. Local courts should handle the company, receivership, insolvency, injunctions and legal authority. The emergency officer should preserve the function and restore governance within a defined mandate. Members should elect and discipline the board under robust authority rules. Global coordination bodies should define minimum continuity expectations, support technical stability, and specify what happens if a registry cannot meet them. None of these actors should claim the whole field.
This role separation protects against two opposite errors. The first error is localism: treating AFRINIC as only a Mauritian company, so global numbering consequences are underweighted. The second error is global managerialism: treating AFRINIC as only a node in a global system, so local member rights and legal process become inconveniences. Emergency continuity must navigate between them. The court preserves the legal entity; global bodies preserve the coordination expectation; members restore consent; staff preserve daily services.
Market confidence depends on that separation. A buyer or operator wants to know that AFRINIC will not vanish because local governance failed. It also wants to know that external bodies will not override local law or member governance without defined rules. A lender wants continuity, but also legal predictability. A small member wants support against institutional collapse, but not a global club deciding regional policy. Each actor prices the balance.
The revised ICP-2 process is therefore more important than its bureaucratic appearance suggests. A lifecycle policy can define assistance, compliance, crisis triggers, peer support and extreme remedies. But it should learn from AFRINIC that emergency recognition power must be limited, reviewable and tied to service continuity, not used to settle ordinary resource disputes. Global bodies can certify that a registry function is at risk. They cannot certify that every action by the registry, every election process or every dispute position is legitimate. Confusing those functions would recreate the problem at a higher level.
The design lesson is functional ring-fencing
The strongest institutional lesson from AFRINIC is not that every RIR needs a receiver waiting in the wings. It is that the core functions of a registry should be ring-fenced before a receiver is needed. The ledger, publication services, bank continuity, data custody, staff authority, election integrity and high-consequence dispute handling should not all depend on the same fragile board moment.
Functional ring-fencing begins with the ledger. Data custody should be protected by audit trails, separation of duties, independent backups, access controls and emergency protocols. No board faction, staff insider, creditor, litigant or temporary officer should be able to alter records without traceable authority. The public record should distinguish routine updates, contested changes, court restraints and emergency holds. If the ledger is protected, institutional conflict is less likely to contaminate resource confidence.
The second ring is service continuity. RDAP, Whois, reverse DNS, RPKI, IRR-related services, member authentication and ticketing should have continuity plans independent of board politics. Vendors, keys, repositories, operating staff and payment routes should be identified in advance. Emergency authority should permit routine technical operation while prohibiting policy innovation unless members or a valid board approve. The aim is not to freeze the registry. It is to keep necessary functions alive without giving emergency officers a blank cheque.
The third ring is financial continuity. Critical-service reserves should be separated from discretionary spending and litigation budgets. Signatory succession should be audited. Banks should have pre-filed authority maps for board vacancy, receivership, court orders and emergency officers. Members should see reporting that distinguishes core operations, recovery costs and litigation costs. A registry that cannot explain how it pays for continuity cannot credibly promise continuity.
The fourth ring is governance reconstitution. Board vacancy rules should identify what happens when seats fall below quorum, elections fail, candidates are challenged or voters dispute authority. Independent scrutineers should be ready before crisis. Proxy and power-of-attorney rules should be strict, digital and auditable. Candidate nomination should include conflict disclosure but avoid capture by any faction. Election annulment should require timely public reasons consistent with legal limits. The June 2025 AFRINIC episode shows that a weak election repair process can become a second crisis rather than a cure.
The fifth ring is dispute separation. High-value resource disputes should not be able to capture the whole institution. A transfer fight should not freeze unrelated services. A holder dispute should not decide board legitimacy. A board fight should not disrupt RPKI. A bank dispute should not prevent essential vendor payment. A court order should be implemented exactly, not expanded into institutional strategy. Separation reduces the reward for brinkmanship because each conflict is confined to its proper field.
The sixth ring is global contingency. Peer RIRs and ICANN should have defined support roles that preserve uniqueness and service continuity without taking sides on local disputes. Emergency registry support, if ever needed, should be temporary, minimal and transparent. Derecognition should be the final remedy, not a casual threat. The existence of global fallback should discipline local governance, not displace it.
Ring-fencing is not anti-member. It protects members by making sure their registry cannot be disabled by a single point of governance failure. It is not anti-court. It helps courts preserve the right things without guessing how technical services work. It is not anti-market. It lowers the discount attached to resources by making institutional distress less contagious. Most importantly, it treats emergency continuity as a last line of defence rather than an ordinary operating model.
The bill for emergency continuity
Emergency continuity is valuable because it buys time. It keeps the lights on, preserves the ledger, reassures banks, protects staff, organises elections and gives global bodies a lawful counterparty. In AFRINIC's case, receivership helped bridge a period in which ordinary governance was not functioning and the institution's wider role made collapse unacceptable. Without such a backstop, a private corporate crisis could have produced wider uncertainty for African operators and the global numbering system.
But the bill is larger than the receiver's fees. It includes years of uncertainty, legal expense, delayed governance, member distrust, staff pressure, market discounts, external intervention, election controversy and reputational loss. It includes the cost paid by operators who wait for normal processing, by buyers who price registry risk, by smaller members who lack resources to navigate conflict, by peer institutions forced into contingency planning, and by the region's digital economy when scarce addresses are harder to allocate, transfer or finance with confidence.
The central economic lesson is that emergency continuity should be judged by two standards at once. The first is immediate performance: did it keep services alive and create a lawful path back to ordinary governance? The second is diagnostic honesty: did the institution learn why the emergency was needed? A backstop that preserves the registry but leaves the causes untouched becomes part of the next crisis. A backstop that leads to ring-fenced services, better elections, financial discipline, dispute separation and transparent authority reduces future risk.
AFRINIC's receivership should therefore not be read as proof that the RIR model is either vindicated or doomed. It is proof that the model has hidden dependencies. Private corporate law matters. Bank accounts matter. Election rules matter. Staff authority matters. Litigation incentives matter. Global recognition matters. Scarce-resource markets matter. A registry can be technically competent and still institutionally fragile if those dependencies are not designed as part of continuity.
For IPv4 markets, the implications are direct. Scarcity makes registry continuity more valuable, not less. The more address resources are leased, transferred, used in corporate planning or treated as revenue inputs, the more counterparties will ask whether the registry layer is stable. A region with a credible receiver-continuity history may avoid catastrophic collapse, but it will also be examined for why the backstop was needed. Market confidence will depend on whether recovery produces measurable safeguards or merely a new board over old fault lines.
For members, the incentive should be to make receivership unnecessary. That means treating elections as infrastructure, not ceremony; budgets as continuity tools, not just accounts; bank signatories as risk controls, not paperwork; and dispute separation as protection for all members, not a concession to large holders. The member model remains valuable only if members can govern a public-infrastructure function without making every high-value conflict an existential threat.
For global coordination bodies, the lesson is humility with preparation. They should have lifecycle rules, emergency support and clear expectations for registry continuity. They should avoid framing every crisis as an attack on the RIR system or every local court process as a threat to global coordination. The better claim is narrower and stronger: the ledger and critical services must survive, while local legitimacy and lawful governance are restored under defined rules.
For courts and emergency officers, the lesson is precision. Preserve the company, but identify the public function. Maintain the status quo, but do not freeze necessary services. Restore governance, but do not confuse an election timetable with consent. Protect assets, but understand that the most important asset is confidence in the ledger. Keep the institution alive, but leave behind a structure less likely to need the same rescue.
The hardest question remains whether receiver-continuity is a fire tool or the price of failure. The honest answer is that it is a fire tool whose use reveals the price of failure. AFRINIC needed continuity protection because ordinary governance could not cheaply maintain board authority, banking confidence and decision legitimacy under stress. The rescue function matters. So does the warning. The registry that has required a receiver has shown the world that the ledger can outlive its board, but also that the board, the bank and the court are now part of the ledger's economic risk.
The future design task is to make that risk smaller. A regional registry should be able to suffer disputes, litigation, failed elections and leadership vacancies without making operators question the continuity of number records. It should have protected service layers, disciplined finances, verifiable voting authority, narrow dispute containment and global support rules that activate before collapse. If those safeguards exist, receivership remains a remote emergency backstop. If they do not, it becomes the expensive proof that a private membership company was asked to carry more public-infrastructure weight than its constitution could bear.