Summary
- Ripe-858 permits immediate termination of the Standard Service Agreement after documented bankruptcy, liquidation, suspension of payments or insolvency. It also says RIPE NCC will not terminate when the relevant national authority allows operations to continue and the member fulfils its obligations.
- The exception is important because corporate solvency and network operation are not the same condition. A network may continue under an administrator, purchaser, lender-supported restructuring or limited wind-down even when the original member cannot conduct ordinary business.
- RIPE NCC's 2025 Annual Report attributes nine institution-initiated closures to bankruptcy and 172 to non-payment. Those totals do not show whether the affected networks were active, how long continuity lasted or what happened to downstream customers.
- A continuity regime should recognise the authorised insolvency office-holder, preserve essential registry and security functions, freeze expansion and speculative transfer, protect downstream assignments, publish a deadline and require transfer, rescue or orderly withdrawal.
- The registry should not decide ownership of number resources, creditor priority or the validity of a sale. Its role is narrower: maintain accurate, secure and reversible records while the competent legal authority determines the company's future. Number Resource Society should test whether separated custody and operator continuity can reduce dependence on the solvency of one contracting entity.
At 12:01, the packets do not read the court notice
Insolvency law changes authority. Directors may lose power to an administrator, receiver, liquidator or trustee. Payments may be stayed. Contracts may be continued, disclaimed or assigned under rules that vary by jurisdiction. Creditors acquire procedural rights. A sale of the business may be prepared under judicial supervision.
The network does not update itself from the commercial register. Routers continue operating. Address records remain queried. Customers continue sending and receiving traffic. Staff may work under emergency funding. A wholesale carrier may continue service because disconnection would destroy the value of a going concern.
This mismatch creates a dangerous temptation. The registry may treat the legal event as conclusive proof that services should stop, because the contract is with the insolvent member. Or it may ignore the event to preserve operations, leaving unclear who is authorised to change sensitive records. Both responses collapse distinct risks.
The first risk is legal authority. Instructions from former directors may no longer bind the company. A purchaser may claim control before a sale is final. A creditor may assert security. The registry must know whose direction has lawful standing.
The second is operational continuity. Freezing every change can make data stale, block security response and harm customers. Continuing unrestricted access can permit dissipation, unauthorised transfer or concealment. The required state is neither ordinary membership nor instant erasure.
The institutional question is therefore not whether insolvency matters. It plainly does. The question is what insolvency should trigger: automatic destruction of the relationship, or supervised transition from one accountable operator to another.
The current rule already admits that failure can be partial
Ripe-858 sets out closure and deregistration procedures. For bankruptcy, liquidation, suspension of payments or insolvency, it allows immediate termination after receipt of official documents or public notice. The rule then adds a critical qualification: if the relevant national authority decides that operations can continue, and the member fulfils the obligations imposed by the agreement, RIPE NCC will not terminate.
That sentence prevents a crude equation between insolvency and operational death. It recognises that the competent national authority may preserve a company or business as a going concern. It also protects the registry by requiring continuing compliance.
The qualification is sound but underdeveloped as a public continuity standard. What counts as a decision that operations can continue? Must the entire legal entity continue, or can a network business continue under an administrator? Which agreement obligations are essential during a temporary period? How quickly must evidence arrive? What if the authority permits operation but the estate cannot immediately pay a full annual contribution?
The public document does not provide a detailed test. It tells parties the consequence and exception, but not a structured method for applying them across different insolvency systems. That leaves substantial judgment with staff at the moment when time and authority are most uncertain.
Such judgment is unavoidable. A Dutch bankruptcy, a British administration, a French safeguard proceeding and another jurisdiction's liquidation do not create identical powers. The error would be to confuse necessary legal interpretation with unbounded institutional discretion.
A continuity standard can preserve flexibility while naming the questions: competent authority, lawful representative, operational status, essential services, funding, security, customer dependence, proposed exit and maximum duration. The answer can vary by case; the questions should not.
Nine bankruptcies reveal almost nothing about network consequence
The RIPE NCC Annual Report 2025 reports 187 closures initiated by the organisation. It attributes 172 to non-payment, nine to bankruptcy, three to unresponsiveness and three to untruthful information. This is useful administrative transparency.
It is not a continuity account. The nine bankruptcy cases may have involved inactive shells, functioning access providers, hosting businesses, internal enterprise networks or companies whose resources transferred promptly. The report does not say. Nor should individual confidential cases be exposed casually.
The numbers nevertheless identify a measurable population. For each category, RIPE NCC could publish anonymised bands: whether the network appeared active; whether an office-holder was identified; whether a transfer, rescue or deregistration occurred; duration; number of downstream independent assignments; and whether a temporary continuity measure was used.
These are not accusations. They are the data needed to test whether the closure rule matches operational reality. If all nine networks had already ceased, the continuity concern would be narrower. If several operated for months under an administrator, the qualification in ripe-858 would deserve a fuller procedure.
Non-payment also warrants care. It is not the same as insolvency, but it can be an early signal. A company can miss an invoice because of administrative error, sanctions, banking disruption, dispute or cash failure. The 172 cases should not be redescribed as insolvent networks. The annual report correctly keeps the categories separate.
The larger lesson is about denominators. Closure counts measure institutional actions against members. They do not measure networks, customers, prefixes announced, services affected or errors avoided. A governance report that wants to discuss continuity must add those dimensions carefully, without pretending that resource scale equals social importance.
The contract is bilateral; dependence is not
The Standard Service Agreement is between RIPE NCC and the member. That bilateral structure provides clarity. The member pays, supplies accurate information, follows policy and receives services. When the member fails, contractual termination is a natural remedy.
Yet registry records are relied on beyond the two parties. Downstream customers may use assignments made through the LIR. Other networks consult contact and routing information. Resource certification services can affect signals used by relying parties. Law-enforcement, security and abuse teams may need accurate contacts. None becomes a party to the service agreement merely by depending on the data.
This external dependence does not give every user a veto over termination. It does change the proportionality of implementation. A landlord can terminate a tenant's lease, but a hospital's patients are relevant to how closure occurs. Similarly, a registry can enforce a membership agreement while recognising that abrupt record degradation may impose costs on strangers to the breach.
RFC 7020 describes the number registry system as a hierarchy serving LIRs and other customers, with resources reaching providers and end users. It does not create insolvency rights. It does establish why the operational population is broader than the legal member.
The member's failure can therefore have layered effects. Loss of portal access may prevent contact corrections. Certification changes may affect routing-security operations. Deregistration can change the authoritative record. Downstream organisations may need a new sponsoring relationship. The actual route may continue for a time, creating divergence between operational and registry states.
Continuity governance aims to limit that divergence. It does not promise uninterrupted connectivity, which the registry cannot control. It preserves the accuracy and security functions within the registry's authority while other actors manage circuits, equipment and customers.
Stewardship is not continued membership
The cleanest institutional response is a temporary stewardship status. The insolvent company would no longer exercise ordinary member governance as if nothing happened. Instead, a verified office-holder or court-authorised operator would receive limited authority to maintain existing records during a defined transition.
The distinction matters. Continuing full membership may allow voting, new requests, additional accounts or discretionary transfers that an insolvent estate should not exercise without clear authority. Immediate closure may disable necessary maintenance. Stewardship occupies the middle.
The status should begin only after evidence from a competent authority or verified office-holder. In urgent cases, RIPE NCC could impose a short protective hold while verification occurs. Former directors and current technical staff may provide information, but their authority must be assessed under the insolvency order.
Permitted actions should be listed. They may include updating operational and abuse contacts, repairing authentication after compromise, maintaining existing route-origin authorisations within the current service, correcting demonstrable registry errors, and communicating with downstream End Users about continuity.
Restricted actions should also be listed. No new speculative resource requests, no onward transfer outside an approved sale, no material expansion, no deletion that prejudices claimants, and no use of the member vote unless the governing law and Articles clearly preserve it.
Stewardship should have a fixed initial period, perhaps ninety days, with one reasoned extension where a court-supervised rescue or sale is active. The exact duration needs consultation and evidence. The principle is that temporary authority must expire into rescue, transfer, ordinary membership, orderly withdrawal or deregistration.
Calling the status stewardship avoids a false conclusion that the estate owns the registrations as ordinary property. The registry is preserving an accountable state while legal questions are decided elsewhere.
The office-holder must be visible and bounded
Historical RIPE procedure recognised that a court-appointed administrator may take over closure responsibilities. Current transfer procedure recognises authorised persons and legal successors in bankruptcy or liquidation-related requests. These are sensible points of entry.
Verification should establish the office-holder's appointment, territorial and legal scope, effective date and power over the relevant business. Some appointments cover the whole company. Others concern particular assets. A restructuring adviser without statutory authority is not equivalent to a liquidator.
The registry should record whose instructions it will accept and notify competing contacts. The notice need not disclose confidential financial detail. It should make the authority boundary clear enough to prevent former managers from continuing to act through old credentials.
Technical staff deserve a defined role. They often know which records must be preserved and which downstream services depend on them. They may not have authority to transfer rights. The office-holder should be able to designate them for operational maintenance while retaining responsibility for material decisions.
Conflicts require escalation. A purported buyer may present a sale agreement while the office-holder says conditions remain unsatisfied. A secured lender may claim control of assets. A former director may challenge the appointment. RIPE NCC should freeze dispositive changes and seek a decision or clarification from the competent authority rather than resolving creditor priority itself.
The office-holder should also receive a concise registry inventory: affected accounts, registered resources, contacts, certification state, downstream independent assignments and open requests. This reduces the chance that an administrator unfamiliar with number registration overlooks a critical dependency.
Accountability runs both ways. The office-holder must maintain contact, meet deadlines and explain the transition plan. Stewardship is not a blank cheque signed by a court title.
Preserve the minimum viable registry state
Continuity should be defined service by service. “Keep the network running” is too broad for a registry and may imply powers it does not possess. The appropriate target is a minimum viable registry state.
First, identity records must show the member's legal status and the authorised office-holder without creating defamatory or speculative labels. Accuracy includes the fact of administration where public and relevant.
Second, operational contacts must remain reachable. If staff change, verified updates should be permitted. Stale abuse and incident contacts impose costs on other networks.
Third, authentication must be secured. Old credentials associated with departed directors or contractors should be revoked. New credentials should use strong verification and limited roles.
Fourth, resource records should remain stable unless an approved correction or transfer is necessary. Bulk changes during uncertainty create avoidable risk. A record under review can carry an internal protective status without broadcasting unverified ownership claims.
Fifth, certification and related security services need explicit treatment. Abrupt revocation may affect relying networks; indefinite continuation under unknown control is also risky. The stewardship order should identify who may maintain existing authorisations, what changes are allowed and how relying parties will be notified of material transitions.
Sixth, downstream independent-resource holders need direct notice where the sponsoring relationship is affected. Existing policy history contains defined periods for End Users to establish a new contractual relationship after a sponsoring LIR closes. The broader continuity regime should integrate rather than surprise those parties.
Minimum does not mean trivial. These functions maintain public accuracy and operational security. It means no expansion beyond what is needed to preserve an orderly transition.
Customers need notice without a claim to the estate
Downstream customers can suffer from registry disruption but may have no legal interest in the member's assets. Governance should neither ignore them nor invite them to litigate ownership through the registry.
The appropriate right is continuity notice and evidence submission. A customer should be able to show that a registration supports a live service, identify a reachable technical contact and describe the harm of abrupt change. That evidence informs proportionality. It does not determine who acquires the resource registration.
Notice should be direct where reliable contact data exist. A general website announcement is limited public evidence for an affected End User with a known email address. The message should explain what remains stable, what action is required, deadlines and where to verify instructions. It should avoid revealing confidential insolvency claims.
Customers also need protection from impostors. Distressed-company events attract social engineering. Communications should be cryptographically or procedurally verifiable through established channels. Requests to move services or pay new fees should not rely on an unexpected email alone.
Where the member made assignments to customers from an allocation, the legal and policy position may differ from independent resources under a sponsoring relationship. The registry should not promise that every downstream use will be preserved indefinitely. It should require the office-holder and prospective buyer to document the treatment of affected customers in the transition plan.
Large customers may protect themselves through contracts and legal teams. Small organisations may not know that their addressing depends on an insolvent intermediary. A registry continuity standard should be designed for the least informed affected party, not only for sophisticated claimants.
Notice is therefore part of due process even where the recipient has no vote and no property claim. It gives the person bearing operational risk a chance to prepare.
Fees require a continuity account, not a moral judgment
An insolvent estate may lack cash to pay the annual contribution. Continuing services without payment shifts costs to other members. Demanding full payment before any action may destroy a viable sale. The problem is financial and should be treated transparently.
Essential stewardship services could be charged as an administrative expense where law permits. A buyer might fund them into escrow without receiving final recognition. A court or creditor may guarantee a limited period. RIPE NCC could waive or defer only under published criteria and board oversight.
The institution should avoid moral language about deserving companies. Insolvency can result from fraud, poor management, market shock, sanctions, currency controls or a parent failure. The cause may matter to legal authority and risk, but registry continuity is not a reward for virtue.
A continuity account should state the fees due, services preserved, payer, reservation of rights and deadline. Payment should not prove ownership. Non-payment should not be ignored. The account separates cost recovery from final succession.
The 2025 closure figures show that non-payment is far more common than bankruptcy as a recorded ground. A missed invoice should therefore not automatically activate a full insolvency regime. Ordinary reminders and closure safeguards remain appropriate. Stewardship begins when there is verified legal or operational evidence that ordinary corporate authority has changed.
Where no party funds even minimum services and no competent authority supports continuation, closure may be unavoidable. The decision should still document downstream notice and transition steps. Fiscal discipline and procedural care are compatible.
A ninety-day plan must end somewhere
Every stewardship order should require an exit plan. The office-holder should identify the likely path: company rescue, sale of the network business, transfer to a successor, managed migration of customers or cessation.
For rescue, the plan should specify when ordinary governance and payment capacity return and how authorised contacts will be confirmed. For sale, it should identify the buyer, transaction authority, affected records and expected completion date. For wind-down, it should identify customer notice, return or transfer of resources where applicable, and record closure.
Milestones should be dated. A vague statement that negotiations continue is not enough for repeated extensions. The office-holder can protect confidential bidders while showing that a sale process, court hearing or creditor vote is real.
At the first review, RIPE NCC should assess operational status, compliance, funding, security and progress. It may continue the order, narrow permissions or begin closure. Reasons should be given to the office-holder and summarised for affected parties.
The maximum period must be long enough for real insolvency proceedings and short enough to prevent limbo. A single global number may be unrealistic, but categories can set presumptions. A court-supervised going-concern sale may justify more time than an unsupported claim by former management.
If litigation lasts years, the registry needs a durable but reviewable arrangement authorised by the competent court. Temporary stewardship should not become permanent merely because parties are slow. Periodic review, cost coverage and security controls remain necessary.
The end state should be explicit. Ordinary member status resumes, a verified successor takes over, records move under policy, or services close with notice. A continuum without an end is just hidden discretion.
The registry must not become an insolvency court
The proposed regime has a strict jurisdictional limit. RIPE NCC should not decide whether number resources are property, which creditor has priority, whether a sale price is adequate or whether directors breached duties. Those questions belong to applicable law and competent authorities.
The registry may need to interpret documents to perform its own duties. It can decide whether an instruction comes from the recognised office-holder, whether policy conditions are met and whether a record should change. That is administrative fact-finding, not general adjudication of the estate.
When competing claims cannot be resolved within that narrow competence, the safest course is to preserve the status quo, restrict sensitive actions and ask the parties for a court order or agreed direction. The registry should not reward whichever side submits first or controls old credentials.
The same limit applies to customers. Their continuity evidence matters, but it cannot override a lawful closure or create title. Public-interest consequence informs timing and safeguards, not ownership.
This boundary protects RIPE NCC from institutional overreach. It also protects claimants. A private membership organisation should not make final determinations about domestic insolvency rights through an opaque support exchange.
The boundary should appear in every stewardship order: the order preserves registry integrity and operational continuity without determining proprietary rights. That sentence keeps the temporary decision honest.
Review should ask whether the transition is proportionate
An immediate termination or refusal of stewardship should be reviewable by someone institutionally separate from the first decision. The review need not relitigate insolvency. It should test authority, relevant evidence, consistency, time, security and downstream impact.
The office-holder should have standing. The registered member, where it retains legal capacity, and an asserted successor should be heard. Downstream organisations may submit impact evidence but should not become full parties unless their own registration is directly affected.
Urgent review must be fast. A network cannot wait through a conventional annual appeal cycle. Temporary controls can remain while the reviewer decides, provided they are no broader than necessary.
The reviewer should ask five questions. Was the relevant legal event verified? Was the correct authority recognised? Did RIPE NCC distinguish ordinary membership from minimum continuity? Were restrictions connected to identified risks? Is there a dated exit?
A negative answer should lead to correction, clearer reasons or a revised order. It should not automatically grant the claimant every requested power. Review is a safeguard against procedural error, not a substitute operator.
Anonymised review summaries would improve future decisions. They could explain, for example, why authority of an administrator was sufficient, why a claimed buyer lacked completed approval, or why downstream dependence justified a short extension. Security details and commercial identities can remain protected.
Predictability is particularly important for small operators. Large insolvencies attract specialised counsel. A small regional provider may have an administrator unfamiliar with RIR terminology. Published practice reduces the advantage of institutional memory.
A continuity protocol in twelve questions
What legal event occurred, on what date and under which authority?
Does the member still exist, and who can lawfully act for it?
Is the network operating, partially operating or ceased, and what evidence supports that classification?
Which LIR accounts, registrations, certification functions and downstream assignments are affected?
Which existing services are essential to accuracy, security and safe transition?
Which credentials must be revoked, preserved or reissued?
Who will pay the limited continuity cost, and does payment reserve all substantive rights?
What instructions are permitted, and which transfers or expansions are frozen?
Which customers and relying parties require direct notice?
Is there a rescue, sale, transfer or wind-down plan with dates?
When will the order be reviewed and when will it expire?
Which independent reviewer can correct a mistaken authority or disproportionate restriction?
These questions are intentionally operational. They do not ask RIPE NCC to solve the insolvency. They ask it to govern the part of the transition it controls.
What the evidence proves, and what remains unknown
The public rules prove that insolvency can trigger immediate termination and that continued operations authorised by the relevant national authority can prevent it. They prove that legal successors and authorised persons have recognised roles in transfer requests. Historical procedure acknowledged court-appointed administrators and downstream End User concerns.
The Annual Report proves that bankruptcy was recorded in nine institution-initiated closures in 2025. It does not prove that any network failed because of the closure rule. It does not show that RIPE NCC denied continuity to an authorised administrator. It does not support a claim of widespread harm.
The analysis is therefore a design test, not a case allegation. A good rule should remain robust before a crisis produces public damage. The existence of an exception in ripe-858 suggests that staff already confront the distinction between corporate and operational continuity.
Missing evidence should be supplied through anonymised case statistics and review summaries. How many insolvency notices involve active services? How quickly is an office-holder verified? How often do records transfer, return to ordinary status or close? What are the downstream effects?
Counterevidence may show that cases are small, short and well managed. That would narrow the need for reform. It would not remove the value of publishing the standard. Continuity should not depend on parties knowing whom to call.
Insolvency changes authority before it changes the packets
The first registry problem in insolvency is authority. The routers may still work, employees may still answer tickets and customers may still pay, but the person authorised to bind the company can change overnight. Directors may lose power, an administrator may be appointed, a receiver may take control of assets, a court may impose a stay and creditors may challenge transactions. The registry cannot assume that yesterday's contact can make today's binding decision.
At the same time, the registry should not assume that the network has failed. Insolvency is a legal and financial condition, not a packet-level fact. Many insolvent companies continue trading while a sale, rescue or orderly wind-down is pursued. If the registry reacts as though insolvency itself destroys operational legitimacy, it can create the very failure that the insolvency process is trying to avoid.
The procedure should therefore begin with an authority inquiry rather than a service assumption. Who now has power to instruct the member? Which records are necessary for continuity? Is there a moratorium, court order or sale process? Are customers being migrated? Are resources collateral, leased, assigned, sponsored or used by subsidiaries? Which actions are urgent and which can wait?
This inquiry can be standardised. A registry does not need to become an insolvency court. It needs a form of recognition for the temporary office-holder, a record of disputed authority and a limited set of actions that preserve accuracy without dissipating value. Freezing everything may be as harmful as accepting every instruction.
Creditors and customers ask different questions
Insolvency creates a conflict between recovery and continuity. Creditors may view scarce address holdings as value that should support repayment. Customers view the same records as part of ongoing service. Employees view them as necessary to keep contracts alive. A buyer views them as transaction assets. The registry views them as public-state entries that must remain accurate and unique.
Those interests are not identical. A creditor may prefer sale to the highest bidder. A customer may prefer continuity with the existing operator or a rapid migration to a trusted provider. A receiver may prefer a clean transfer that maximises estate value. The registry should not choose among commercial strategies, but it must prevent any strategy from corrupting public records or causing avoidable network harm.
This is where a minimum-continuity rule is useful. During a verified insolvency process, the registry can maintain essential services, contact accuracy, routing-supporting records and dispute notation while limiting extraordinary transfers, certification changes or record deletions unless authority and customer impact are clear. That rule preserves the estate without turning registry records into an unmanaged collateral warehouse.
Creditors should also know what they can and cannot rely on. A registry record may support value, but it does not guarantee saleability free of policy conditions, reputation problems, customer contracts or legal stays. Clear insolvency guidance would reduce overvaluation and reduce pressure on the registry to improvise under lender or court pressure.
A sale out of insolvency needs a cleaner handover than an ordinary sale
An ordinary acquisition can rely on seller cooperation, warranties and post-closing covenants. Insolvency sales often have weaker cooperation. Staff may leave. Records may be incomplete. Court timetables may be compressed. The buyer may accept limited warranties. The registry may receive a court order, administrator certificate or asset-sale document rather than a familiar member request.
That environment requires a stricter handover bundle. The buyer should identify the acquired resources, operating network, customer migration plan, authority chain, known disputes, reputation issues, ROAs, route objects, reverse-DNS status and contacts. The administrator or receiver should certify what is being sold and what remains with the estate. The registry should record the basis for recognition and any unresolved caveats.
Without that bundle, insolvency transfer can become a laundering device. A distressed resource can be sold free of visible operational history while reputation, customer confusion or authority disputes remain hidden. Conversely, a legitimate buyer can be trapped because the registry has no standard way to accept insolvency evidence. Both outcomes damage confidence.
The standard should be public enough for buyers and creditors to price. If a registry will not recognise a sale without specified documents, market entities should know before bidding. If continuity support is available during administration, customers should know how it is triggered. Transparency reduces both opportunism and panic.
Insolvency guidance should be written before the next case
The worst moment to invent insolvency policy is during insolvency. At that point creditors, buyers, customers and office-holders all have urgent incentives. A registry staff member may face legal letters, public criticism and technical risk at the same time. Even a sensible decision can look discretionary if no public standard existed beforehand.
Guidance should therefore be published in calm time. It should define authority evidence, emergency contacts, minimum continuity services, transfer restrictions, dispute notation, customer notice and review rights. It should state what the registry will not do: it will not value the estate, rank creditors, bless a sale free of policy conditions or decide commercial disputes unrelated to record accuracy.
Such guidance would not remove judgment. It would make judgment reviewable. It would also help insolvency professionals understand that number-resource records are not ordinary office equipment and not ordinary contracts. They are public-state dependencies whose value depends on trust, continuity and clean authority.
The legal person can fail without making the record false
An accurate registry record does not become useless because the company named in it enters administration. It may become incomplete. Authority changes. A warning, restriction or successor review may be necessary. But deleting or freezing the record without a transition can make it less accurate at the moment accuracy matters most.
The institution should separate four decisions: whether ordinary membership continues, who has temporary authority, which minimum services remain, and what final outcome follows. The first can end while the second and third persist briefly. The fourth should arrive on a clock.
This is not leniency toward failed businesses. It is protection for registry integrity and parties outside the insolvency. It also protects other members from indefinite subsidy by limiting scope, charging where possible and requiring an exit.
Number Resource Society can contribute a future alternative only if it demonstrates that operator identity, registration custody and service continuity can survive corporate failure without becoming anonymous or unaccountable. Separation can reduce single-contract dependence, but it must preserve verifiable authority and lawful succession.
The principle is narrower than a rescue policy: corporate failure should not automatically destroy live number records. It should trigger supervised continuity, stronger verification and a dated transition. A network that remains technically solvent deserves neither permanent immunity nor administrative oblivion. It deserves an orderly handover.
Directory links
- RIPE Network Coordination Centre (RIPE NCC)
- RIPE NCC members and Local Internet Registries
- Number Resource Society