Part 3 of 3 · Why change cannot wait
Build the way out before you need it.
The rules were written for cheap labels. Addresses have since become part of how businesses, public services and whole countries run, while the institutions that keep them are under strain and their rulebook is being rewritten. An exit designed in calm costs little. One improvised in a crisis is paid for by the networks and the people who depend on them.
In figures
- 666,624
- IPv4 addresses sold in Nortel’s bankruptcy, the moment addresses became assets. Note 65
- US$32,877
- Interest on US$2 million held up for sixty days at 10%: an illustration of what delay costs. Note 74
- 2033
- My forecast for a distributed ledger to replace the registries as the Internet’s record. Note 43
The short version
- Addresses have become capital, but the rules still treat them as free labels.
- Every year of dependence on one gatekeeper raises the cost of a forced change.
- The strain is already visible, and the rules that recognise the registries are being rewritten now.
- Succession has to be built and tested in advance, and there is work to start this year.
The world the rules were written for is gone
When the registries were set up, addresses were plentiful and cheap, and a registry could look like an address book. That world ended with the free supply of IPv4. The turning point came when Nortel went bankrupt and its 666,624 IPv4 addresses were sold to Microsoft as assets in the proceedings. Since then addresses have become transferable, financeable, leased, litigated and subject to sanctions, and they sit inside live networks.
The language of the rules did not change with them. Rules that were harmless for free labels now act on something valuable, and every restriction has a price: buyers, lenders, lessees and insurers all discount addresses whose future depends on a registry’s discretion. The visible costs are fees, paperwork and delay. The larger ones are hidden: capital that cannot move, collateral worth less, investments never made.
“The moment IPv4 became scarce, the old registry language stopped being harmless.”
Every year of dependence raises the price of leaving
An address is not just a number on a registry’s list. Customers’ firewalls and allowlists, payment systems, cloud deployments, contracts and years of security settings are built around it. The longer a network depends on one gatekeeper, the more of this accumulates, and the more a forced change costs: renumbering touches everything that has learned to trust that address.
Delay has a price as well. Suppose an operator has borrowed US$2 million for a purchase and a registry review adds sixty days: at 10% a year, that is about US$32,877 in interest alone, before any customer is lost. The figure is an illustration, not a measured loss, but the mechanism is real, and an approval that finally arrives does not refund a cost already paid.
“A low refusal count does not measure the cost of the process.”
The strain is already visible
The institutions are not steady enough to postpone the question. The registry for Africa has spent years in court, went without a quorate board from 2022 and was placed under a court-appointed receiver; its newly elected board then ratified a policy that keeps addresses inside the region.
At the same time, the rules that recognise the registries are being rewritten. ICANN has published a second draft of an RIR Governance Document that would replace ICP-2, the policy under which the registries are recognised, and set new rules for how they operate and how they can be derecognised. Whether the new rules give networks a real way out, or lock the present structure in place, will shape the coming decades.
Consent is thinning too. Turnout in registry elections is low, operators already treat their addresses as assets whatever the rules call them, and the United Nations has made its Internet Governance Forum permanent without touching any of the levers that actually control networks. A system that runs on voluntary cooperation rarely collapses in a day. It loses the trust of the people who run the networks, one decision at a time.
“A system like this does not need to be immediately overthrown in order to begin dying.”
What happens if nothing changes
The path is predictable. More disputes will move from policy rooms into courts, which will be asked to freeze accounts, appoint receivers and decide who may act for a registry. States will stop treating the registries as harmless technical associations. Operators will route around registry authority, relying on contracts, court-backed transfers and their own records. The global bodies above the registries will be tempted to centralise and governments to nationalise, and the result could be conflicting registries and political pressure on routing.
The break may not be gradual either. If a registry can act against a major network or a country’s address space at almost no cost to itself, a single decision could split the one shared record the Internet relies on, leaving security systems and transfer records pointing at different versions of reality. Restoring a single record after that would be close to impossible.
“The Internet does not fail only when packets stop moving.”
Succession has to be built before it is needed
The continuity everyone rightly worries about is the continuity of a function: unique numbers, accurate records, directory and security services, and running networks. It is not the continuity of any one institution’s power. The more critical the function, the less it should depend on the survival or goodwill of a single organisation.
That kind of continuity cannot be improvised in a crisis. The security system alone involves keys, certificates, repositories and the trust other networks place in them; moving it safely takes a plan, rehearsal and objective triggers agreed in advance. The transition has to begin early enough that the network survives the cure.
“Registry continuity is necessary. Institutional immortality is not.”
What can be done now
For AFRINIC I have proposed a timetable: an immediate halt to revocations, reclaims, transfer refusals and interference with security or reverse-DNS services on non-technical grounds; objective transfer recording and an end to regional export bans within 120 days; a design for portability and failover within 270 days; a rewrite of the registry’s whole role within a year; and an independent review body within eighteen months.
Operators need not wait for policy rooms. They can keep a record of every rule they relied on and every delay they suffered, hold registries to commitments already made, use ordinary law where a rule causes them loss, and organise with other holders now, while they still have leverage. Those who wait will organise after the break, under worse conditions and at a higher cost.
My own forecast, made in March 2026, is that by 2033 a distributed ledger will have replaced the registries as the Internet’s record. The direction matters more than the date: build the way out while there is still a choice.
“Which continuity do you support?”
Questions readers ask
Won’t IPv6 make all of this irrelevant?
In earlier interviews I said the Internet would eventually move to IPv6. My Notes since January 2026 argue that it will not, in any time that matters. IPv6 works, but after more than twenty-five years of promised transition most operators still have to run both systems side by side, paying twice for the same revenue, and IPv4 remains what their customers’ connections depend on. As long as that is true, who controls the IPv4 record remains a live question.
Isn’t sudden change riskier than waiting?
I don’t run a network. Why should I care?
Because the services you use do. Hospitals, airports, banks, schools and the apps on your phone reach you through networks whose addresses sit in these records. When a registry dispute turns into an outage or a forced renumbering, those services feel it first, and a hospital does not care whether the cause was a noble community process.
Why should anyone believe your forecast?
You need not. The case for building a way out does not depend on the date. Even if the registries lasted for decades in their present form, a network that can leave is safer, and a registry that can be replaced behaves better. The forecast is mine; the risks are in the registries’ own documents.
The Notes behind this page
Every section above is a summary. These are the Notes where the argument is made in full.
- Note 70The Registry Continuity Fallacy — Protect the Ledger, Not the GatekeeperWhat must survive an institution’s failure, and how to plan for it.
- Note 65Running-Code Primacy: The Patch Needed to Preserve the Internet’s Original DesignThe predictable failure path if nothing changes.
- Note 71The Policy MirrorHow IPv4 changed the system, and a timetable for reform.
- Note 50On When a Registry Can Destroy Without Cost — and Why the System Then Dies With ItWhy the break may be sudden rather than slow.
- Note 43On The Seven-Year HorizonMy seven-year forecast, and why the gradual route failed.
- Note 60On How Thick Governance Destroyed the Obscurity It Needed to SurviveHow a system begins to die long before anyone overthrows it.
- Note 74Need Base and Pre-Approval — The RIR Veto over IPv4 TransfersWhat delay costs, and what operators can do today.
- Note 25On the Last Attempt to Centralize the Internet — the ICP-2 Revision Draft, Implementation Power, and Structural RiskWhat the planned rewrite of the registries’ rulebook would lock in.