Summary

  • KeNIC's own policy states that the Communications Authority issued its licence on 16 December 2015 under sections 83D(1)(b) and 83F of the Kenya Information and Communications Act, and describes the company as a limited-by-guarantee vehicle for a public-private partnership.
  • The Authority's June 2026 licensee register records KeNIC under Application Service Provider with a postal address and nothing else, while the Act hands duration to the individual licence — so the term exists, is legally decisive, and is not in the public file.

Every Kenyan business holding a .ke name, and every registrar reselling one, buys time inside an instrument none of them can read. That is not a scandal. It is a documentation gap with a precise shape, and the shape is worth mapping, because Kenya is unusually candid about who licensed whom right up to the point where the term should appear.

The date KeNIC supplies

KeNIC's Data and Information Sharing Policy carries the clearest sentence in the whole record: its licence "was issued with its license by the authority on 16th December 2015", under sections 83D(1)(b) and 83F and the Electronic Certification and Domain Name Administration Regulations, 2010 (KeNIC policy). The same document calls KeNIC a company limited by guarantee operating through a public-private partnership that manages and administers .ke. The copy reviewed here displays no publication date, which makes the sentence an undated statement about a dated event — enough to fix the grant, nowhere near enough to fix its term.

That is the first structural point. The operator names its licensor without hesitation. The reticence starts one line later.

What the Act delegates, and what it withholds

The Kenya Information and Communications Act, in the consolidation dated 31 December 2022 that was reviewed, requires a licence at section 83D(1)(b) for repository updating or subdomain administration within .ke, and empowers the Commission at section 83F to grant subdomain-administration licences subject to conditions (KICA). Then section 80 does the thing that decides this article: a licence "continue[s] in force for such period as may be specified in the licence". Duration is not in the statute. It is in the paper. Section 25(5) authorises revocation in accordance with the Act, and section 83 concerns the register — a distinction worth holding, because the Authority's own public notice cites section 83 where it means the licensing provisions.

The subsidiary legislation thickens the duties without ever fixing a clock. Legal Notice 116 of 2010, gazetted on 30 July 2010, requires Commission approval before a new .ke subdomain is created (regulation 20), binds the administrator to operational stability, secure name-service databases, notification of ccTLD data changes and Commission access to zone files (regulation 21), and demands six months' written notice to the Commission and to subdomain administrators before any discontinuation, four months' public notice, current zone files and approval for their transfer (regulation 22), alongside at least annual compliance audits (regulation 25) (LN 116). Legal Notice 71 of 2010, gazetted 4 June 2010, lets the Commission specify conditions (regulation 7) and revoke a licence (regulation 12) with a thirty-day appeal window to the Tribunal, requires written consent for transfer or assignment (regulation 10), weighs past compliance in renewal (regulation 11) and preserves existing licences on migration to a new framework (regulation 23) (LN 71).

Read together, those instruments tell a licensee exactly what it must do and roughly how it can lose the licence. Neither tells it, or its customers, when the licence ends.

A register that classifies but does not date

The Communications Authority's Register of Telecommunication Licensees for June 2026 lists Kenya Network Information Centre under the Application Service Provider category — PDF page 34, entry 318 — with the company's name and postal particulars, and no grant date, expiry date or conditions (register). Entry 318 is a position in a list, not a licence number. Anyone citing it as the licence's identity is citing a row count.

This is the hinge of the affair. The register proves the classification is current as of June 2026. It cannot prove tenure, because a register that records who may operate is not the same document as the instrument that says for how long.

Three durations in circulation, none of them the licence

Kenya's regulators have not been silent on terms. They have been specific in three places, and the specificity does not converge.

The Authority's Revised Telecommunications Market Structure of June 2026 puts .ke ccTLD registry services inside Applications Service Provider licensing at category D.1, and handles subdomain registrar services separately at D.4 (market structure). The ASP category offers a fifteen-year term or an optional twenty-five-year term. That is a category-level choice. Nothing in the reviewed record establishes that KeNIC migrated to, renewed under, or selected either option.

The generic Applications Service Provider template says the same and then goes further: fifteen or twenty-five years from the effective date, subject to earlier revocation, with condition 26 allowing suspension for material noncompliance after a sixty-day notice and a further thirty-day notice, and condition 27 listing revocation grounds — material breach, nonpayment, failure to commence, insolvency — with six months' written notice, Gazette publication and effect seven days after publication (ASP template). It is a template. Applying its clauses to a 2015 grant would be inference dressed as citation.

The Ministry of ICT's proposed KICA (Domain Names Administration) Regulations 2026 would replace the discretion with a number: a fifteen-year registry licence at regulation 7, a possible ten-year renewal, notification at least twenty-four months before expiry, and at regulation 5 the power to suspend, revoke or appoint an alternative registry or interim administrator (proposed regulations). As of an Authority update dated 22 September 2026, the revised communications regulations were still proposed and still moving through remaining statutory stages (Authority update). No Gazette enactment or commencement appears in the reviewed record. A proposal that would fix the term is evidence that the term is not fixed yet.

And behind all of it sits the oldest document: the ICANN ccTLD Sponsorship Agreement of 20 December 2002, whose section 2.10 runs the term from signature until termination rather than for a number of years, lets KeNIC exit on six months' notice, and gives ICANN termination grounds including material breach, operational instability, government notification of contravention or designation expiry, and insolvency, with a five-calendar-day suspension for unresolved operational danger (ICANN agreement). Different perimeter, different counterparty, different century.

Fifteen years. Twenty-five. Fifteen again. Open-ended. A counterparty reading only one of those documents would reach a confident and possibly wrong conclusion about how long Kenya's registry arrangement lasts.

The delegee letter under the statute

The 2002 material deserves its own paragraph, because it is the one place where the Kenyan state explained itself in prose. Sammy Kyungu's letter to Stuart Lynn dated 18 October 2002 designated KeNIC as the .ke delegee, conditional on its constitution and continuing commitments, placed .ke management under "the ultimate authority of the Communications Commission of Kenya", required cooperation with transfer or redelegation, and envisaged government-ICANN consultation over termination (2002 letter).

No number appears there either. The 2002 arrangement establishes a chain of authority — state above operator, operator above registrants — and leaves duration to whatever came next. What came next was a statutory licence in 2015, and the public record of that licence is a sentence inside a policy PDF.

The document with licence in its title

Two items on KeNIC's own site sharpen the documentation problem, and both are traps for anyone researching quickly.

The first is a Communications Authority PDF titled "Dot KE Licence — Licence Terms". It authorises .ke subdomain registrar services. It does not name KeNIC as the registry, and its clauses 3.1 to 3.2 reserve the Authority's power to terminate the authorisation and amend its terms under KICA (Dot KE licence). A file named for the licence you are looking for, describing something else.

The second is better evidence and a worse trap. A compliance certificate dated 28 July 2022, valid to 30 June 2023, states in terms: "Please note that this is not a licence but proof of compliance" (certificate). The certificate corrects the label it is published under. Anyone who read its validity date as an expiry date would have dated KeNIC's registry licence to 30 June 2023 and been wrong by construction.

The corporate surface, and the contradiction worth keeping

KeNIC's Background page is straightforward about its licensor: the Authority issued it an application service provider licence in 2015, particularly to provide .ke registry services (background). The same page says KeNIC is responsible for licensing registrars — which its own registrar agreement contradicts at clause 8.2.1, where licensing is done by the Communications Authority at a fee after accreditation (applications). The agreement gives KeNIC contractual powers over accreditation, including forty-eight hours' advance notice of suspension and fourteen days to remedy deficiencies at clauses 4.8 to 4.9, and states at 4.10.2 that a registrar's licence is revoked following accreditation termination. Those are downstream terms about registrars. They say nothing about the ground on which KeNIC itself could lose .ke.

The Board Members page names Thomas Odhiambo as chairman representing the ICT Authority, alongside representatives of TESPOK, DRAKE and KENET, and publishes board committees (board). It sets out no grant, no term and no revocation condition. Note what that means: an ICT Authority seat is an ICT Authority seat. Reading it as a regulator's chair inside the registry would be a category error, and reading a board page as a licence would be worse.

What a registrant is buying

The practical consequence, without theatre. A .ke registration is a service supplied under an authority Kenya treats as a licence. The licensing statute is public, the duties are public, the register is public as of June 2026, and the Authority says plainly in a public notice that it has licensed KeNIC to manage and administer .ke — "KeNIC serves as the Registry for the dot KE ccTLD" (Authority notice).

What is not public is the instrument that says for how long, on what conditions, and after what process a suspension would bite. The reviewed record contains no fee, no price, no registration volume, no service-level percentage and no incident count for the .ke function (policy, register). So no number is written here. What a registrant buys, in documented terms, is continuity under a licence whose perimeter the buyer cannot check — a normal condition of national domain markets, and a poor basis for anyone's assumption that a registry's confident website implies indefinite tenure.

Kenya's authority over .ke is real, current and exercised. Its term is a blank in the public file.