NATIONAL RURAL UTILITIES COOPERATIVE FINANCE CORP /DC/

Evaluation of Disclosure Controls and Procedures

Senior management, including the Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of disclosure controls and procedures as defined in Rules 13a-15(e) and 15d-15(e) of the Securities Exchange Act of 1934. At the end of the period covered by this Report, based on this evaluation process, the Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures are effective at the reasonable assurance level.

Management’s Report on Internal Control Over Financial Reporting

The management of National Rural Utilities Cooperative Finance Corporation (“we,” “our” or “us”) is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Securities Exchange Act of 1934. Our internal control over financial reporting is designed under the supervision of management, including the Chief Executive Officer and Chief Financial Officer, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. generally accepted accounting principles. Our internal control over financial reporting includes those policies and procedures that:

(i)pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets;

(ii)provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with U.S. generally accepted accounting principles, and that receipts and expenditures of ours are being made only in accordance with authorizations of management and our directors;

(iii)provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or dispositions of our assets that could have a material effect on our financial statements; and

(iv)ensure disclosure controls and procedures include, without limitation, controls and procedures designed to provide reasonable assurance that information required to be disclosed by us in reports filed under the Exchange Act is accumulated and communicated to our management, including our principal executive and principal financial officers, or persons performing similar functions, as appropriate, to allow timely decisions regarding required disclosure.

Any system of internal control, no matter how well designed, has inherent limitations, including but not limited to the possibility that a control can be circumvented or overridden and misstatements due to error or fraud may occur and not be detected. Also, because of changes in conditions, internal control effectiveness may vary over time. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation.

Our management assessed the effectiveness of internal control over financial reporting as of May 31, 2026. In making this assessment, management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control-Integrated Framework (“2013 Framework”).

Based on management’s assessment and those criteria, management believes that we maintained effective internal control over financial reporting as of May 31, 2026.

This Annual Report on Form 10-K does not include an attestation report of our registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to attestation by our registered public accounting firm pursuant to the rules of the U.S. Securities and Exchange Commission that permit us to furnish only management’s report with this Annual Report on Form 10-K.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal control over financial reporting during the fiscal quarter ended May 31, 2026 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.