I agree and I’m also surprised in 2026 that these revocation lists don’t update dynamically. Something like ntp for root certificates would be great.