Universität Bremen TZI

Postfach 330440 D-28359 Bremen Germany +49-421-218-63921 cabo@tzi.org

WIT core YANG-CBOR YANG-CBOR (RFC 9254, "Encoding of Data Modeled with YANG in the Concise Binary Object Representation (CBOR)") defines YANG Schema Item iDentifiers (YANG SIDs), globally unique 63-bit unsigned integers used to identify YANG items. RFC 9595 ("YANG Schema Item iDentifier (YANG SID)") defines ways to allocate these SIDs using IANA registries. The present specification employs these SID allocation mechanisms to allocate ranges of 100 000 SIDs (representation size 64 bits) to each holder of an IANA Private Enterprise Number (PEN) of a value below 1 000 000. Holders of PENs of values smaller than 100 000 are also allocated ranges of 10 000 SIDs (representation size 32 bits).

Status of This Memo This is an Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 7841. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at .

Copyright Notice Copyright (c) 2026 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents () in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License.

Table of Contents

• .  Introduction
• .  Example: SID Range Allocation for Holder of PEN 32473
• .  Discussion
• .  IANA Considerations
• .  Security Considerations
• .  References
  • .  Normative References
  • .  Informative References
• Acknowledgments
• Author's Address

Introduction YANG-CBOR defines YANG Schema Item iDentifiers (YANG SID), globally unique 63-bit unsigned integers used to identify YANG items. defines ways to allocate these SIDs using IANA registries. The present specification employs these SID allocation mechanisms to allocate ranges of 100 000 SIDs (representation size 64 bits) to each holder of an IANA Private Enterprise Number (PEN) of a value below 1 000 000. Holders of PENs of values smaller than 100 000 are also allocated ranges of 10 000 SIDs (representation size 32 bits). IANA has allocated a mega-range with 100 billion SIDs (representation size 64 bits) for the SID numbers 300 000 000 000 to 399 999 999 999. IANA has also allocated a mega-range with 1 billion SIDs (representation size 32 bits) for the SID numbers 3 000 000 000 to 3 999 999 999. PENs are registered in using a low-threshold, low-overhead registration process. At the time of writing (~38 years after registry creation), around 66 000 PENs are registered. In this document, the registrant for a PEN is referred to as the "PEN holder". This specification makes the following SID ranges available to certain (current or future) PEN holders for allocation in a scheme defined by the holder:

• The holder of a PEN ppp ppp (< 1 000 000) can use the SID numbers 3pp ppp p00 000 to 3pp ppp p99 999.
• The holder of a PEN pp ppp (< 100 000) can also use the smaller SID numbers 3 ppp pp0 000 to 3 ppp pp9 999.

Example: SID Range Allocation for Holder of PEN 32473 allocated Enterprise Number 32473 "for use in examples in RFCs, books, documentation, and the like". If this Enterprise Number had an actual PEN holder, the present specification would confer control over the following SID ranges to the holder:

• 303 247 300 000 up to 303 247 399 999, and
• 3 324 730 000 up to 3 324 739 999.

(The plaintext form of this document shows "*" characters around the digits conveying the PEN, which are shown in boldface in the other renditions.) As Enterprise Number 32473 is intended to be used in documentation, the SIDs in the two SID ranges are consequently also available for use in documentation.

Discussion This document assigns two mega-ranges as an extremely-low-threshold (zero-interaction) way for a PEN holder to obtain a number space for the YANG SIDs used in their YANG modules. If a PEN is not already available to the entity needing such a number space, it can be obtained through a very low-threshold process. However, use of values in these mega-ranges is not always the recommended approach for a module author:

• In the larger of the two spaces, each SID number needs a representation size of 64 bits ("64-bit SIDs"). (This larger representation size of the absolute value of the SID is of comparatively little consequence due to the delta-encoding used for SIDs in YANG-CBOR.)
• For the holders of PENs with values less than 100 000 in the "Private Enterprise Numbers (PENs)" registry, there is another smaller space of SID numbers that need a representation size of 32 bits ("32-bit SIDs"). By or around 2040, the PENs with a value less than 100 000 are likely to be exhausted; the expectation is that there will be enough opportunities by that time to request SID ranges within mega-ranges already allocated by other registrants that this mechanism is less needed.
• This document does not define infrastructure to discover the YANG module behind a SID in one of its ranges. Of course, each PEN holder can provide such infrastructure, but even then the problem of how to find that infrastructure for a SID remains. (Search engines may mitigate this somewhat.) On the other hand, in some cases this relative obscurity may be exactly what a PEN holder wants to achieve by using this mechanism. If obscurity is not the intention, one or both of the following approaches are encouraged:
  • The PEN holder can provide a public repository where their YANG models can be found alongside the applicable SID files. Such a repository may be easy to set up using a popular git forge such as, at the time of writing, GitHub.
  • Implementations that employ PEN-based SIDs can facilitate information discovery by providing a form of a YANG library , possibly a constrained version .

Relying on the PEN registry might theoretically trigger a land grab of PEN assignments by prospective writers of YANG modules. However, PENs have been around for decades (see , which continues to be in force with no technical changes as Section of RFC 1155 ), and such a land grab has not occurred for the other allocations implicitly provided by obtaining a PEN.

IANA Considerations As summarized in , this document allocates the following two mega-ranges () in the "YANG-SID Mega-Ranges" registry within the "YANG SIDs" registry group :

• 1 billion SIDs ranging from 3 000 000 000 up to 3 999 999 999 (32-bit representation size)
• 100 billion SIDs ranging from 300 000 000 000 up to 399 999 999 999 (64-bit representation size)

YANG-SID Mega-Range Allocations for Use by PEN Holders

Entry Point	Size	Allocation	Org Name	URL
3 000 000 000	1 000 000 000	Private	IANA	https://rfc-editor.org/info/rfc9997
300 000 000 000	100 000 000 000	Private	IANA	https://rfc-editor.org/info/rfc9997

IANA has marked the following ranges as Reserved for Documentation:

• 303 247 300 000 up to 303 247 399 999
• 3 324 730 000 up to 3 324 739 999

An additional contact for the allocation is: IETF CORE Working Group (core@ietf.org) or IETF Applications and Real-Time Area (art@ietf.org). The allocation policy inside the mega-range is "Private" (see ). The URL is that of the present specification. The management of each SID block of 100 000 SIDs, ranging from 3pp ppp p00 000 to 3pp ppp p99 999, is delegated to the PEN holder for PEN ppp ppp (i.e., the PEN holder for ppp ppp controls SID 3pp ppp p00 000 to 3pp ppp p99 999). Similarly, the management of each SID block of 10 000 SIDs, ranging from 3 ppp pp0 000 to 3 ppp pp9 999, is delegated to the PEN holder for PEN pp ppp (i.e., the PEN holder for pp ppp controls SID 3 ppp pp0 000 to 3 ppp pp9 999). requires an organization that requests an entry in the "YANG-SID Mega-Ranges" registry to ensure the technical capacity to manage the SID ranges within those mega-ranges for a period of at least 10 years (Private ranges). The individual SID ranges within the mega-ranges allocated in this document are assigned through the registration of PEN numbers. The technical capacity to ensure the sustained operation of the PEN number registry is derived from the demonstrated capacity of IANA to maintain this registry as well as the importance of a functioning PEN number registry in other contexts.

Security Considerations The Security Considerations of and apply. In particular, the fact that a certain Private Enterprise Number appears in a SID is not an indicator of provenance, i.e., it does not guarantee that the SID or underlying YANG model actually originates from the holder of that PEN. The requirement to ascertain the authoritative source of this information, as discussed in the above security considerations, remains.

References Normative References IANA IANA YANG (RFC 7950) is a data modeling language used to model configuration data, state data, parameters and results of Remote Procedure Call (RPC) operations or actions, and notifications. This document defines encoding rules for YANG in the Concise Binary Object Representation (CBOR) (RFC 8949). YANG Schema Item iDentifiers (YANG SIDs) are globally unique 63-bit unsigned integers used to identify YANG items. SIDs provide a more compact method for identifying those YANG items that can be used efficiently, notably in constrained environments (RFC 7228). This document defines the semantics, registration processes, and assignment processes for YANG SIDs for IETF-managed YANG modules. To enable the implementation of these processes, this document also defines a file format used to persist and publish assigned YANG SIDs. Informative References Trilliant Networks Inc. Acklio This document describes a constrained version of the YANG library that provides information about the YANG modules, datastores, and datastore schemas used by a constrained network management server (e.g., a CORECONF server). Work in Progress This RFC provides the common definitions for the structure and identification of management information for TCP/IP-based internets. In particular, together with its companion memos, which describe the initial management information base along with the initial network management protocol, these documents provide a simple, working architecture and system for managing TCP/IP-based internets and in particular, the Internet. This memo specifies a draft standard for the Internet community. TCP/IP implementation in the Internet which are network manageable are expected to adopt and implement this specification. This document describes an Enterprise Number (also known as SMI Network Management Private Enterprise Code) for use in documentation. This memo provides information for the Internet community. This document describes a YANG library that provides information about the YANG modules, datastores, and datastore schemas used by a network management server. Simple caching mechanisms are provided to allow clients to minimize retrieval of this information. This version of the YANG library supports the Network Management Datastore Architecture (NMDA) by listing all datastores supported by a network management server and the schema that is used by each of these datastores. This RFC is a re-release of RFC 1065, with a changed "Status of this Memo", plus a few minor typographical corrections. The technical content of the document is unchanged from RFC 1065. [STANDARDS-TRACK] This memo describes a straight-forward approach toward producing concise, yet descriptive, MIB modules. This memo defines a format for producing MIB modules. [STANDARDS-TRACK]

Acknowledgments This document was inspired by the discussion of the authors of and on how to handle feedback.

Author's Address Universität Bremen TZI

Postfach 330440 D-28359 Bremen Germany +49-421-218-63921 cabo@tzi.org