Skip to content

A gradual release of Avioverse begins in October 2026. Request early access →

CS 25.963 Fuel tanks: general

Large Aeroplanes (CS-25) · CS-25 · EAR revision 26 Jan 2023

IRImplementing rule

CS 25.963Fuel tanks: general

(See AMC 25.963)

(a)Each fuel tank must be able to withstand, without failure, the vibration, inertia, fluid and structural loads that it may be subjected to in operation. (See AMC 25.963(a).)

(b)Flexible fuel tank liners must be approved or must be shown to be suitable for the particular application.

(c)Integral fuel tanks must have facilities for interior inspection and repair.

(d)Fuel tanks must, so far as it is practicable, be designed, located and installed so that no fuel is released in or near the fuselage or near the engines in quantities sufficient to start a serious fire in otherwise survivable emergency landing conditions, and:

(1)Fuel tanks must be able to resist rupture and to retain fuel under ultimate hydrostatic design conditions in which the pressure P within the tank varies in accordance with the formula:

where: P = fuel pressure in Pa (lb/ft2) at each point within the tank L = a reference distance in m (ft) between the point of pressure and the tank farthest boundary in the direction of loading. = typical fuel density in kg/m3 (slugs/ft3) g = acceleration due to gravity in m/s2 (ft/s2) K = 4.5 for the forward loading condition for fuel tanks outside the fuselage contour K = 9 for the forward loading condition for fuel tanks within the fuselage contour K = 1.5 for the aft loading condition K = 3.0 for the inboard and outboard loading conditions for fuel tanks within the fuselage contour K = 1.5 for the inboard and outboard loading conditions for fuel tanks outside of the fuselage contour K = 6 for the downward loading condition K = 3 for the upward loading condition

(2)For those (parts of) wing fuel tanks near the fuselage or near the engines, the greater of the fuel pressures resulting from subparagraphs (i) and (ii) must be used:

(i)the fuel pressures resulting from subparagraph (d)(1) above, and:

(ii)the lesser of the two following conditions:

(A)Fuel pressures resulting from the accelerations as specified in CS 25.561(b)(3) considering the fuel tank full of fuel at maximum fuel density. Fuel pressures based on the 9.0g forward acceleration may be calculated using the fuel static head equal to the streamwise local chord of the tank. For inboard and outboard conditions, an acceleration of 1.5g may be used in lieu of 3.0g as specified in CS 25.561(b)(3); and:

(B)Fuel pressures resulting from the accelerations as specified in CS 25.561(b)(3) considering a fuel volume beyond 85% of the maximum permissible volume in each tank using the static head associated with the 85% fuel level. A typical density of the appropriate fuel may be used. For inboard and outboard conditions, an acceleration of 1.5g may be used in lieu of 3.0g as specified in CS 25.561(b)(3).

(3)Fuel tank internal barriers and baffles may be considered as solid boundaries if shown to be effective in limiting fuel flow.

(4)For each fuel tank and surrounding airframe structure, the effects of crushing and scraping actions with the ground should not cause the spillage of enough fuel, or generate temperatures that would constitute a fire hazard under the conditions specified in CS 25.721(b).

(5)Fuel tank installations must be such that the tanks will not rupture as a result of an engine pylon or engine mount or landing gear, tearing away as specified in CS 25.721(a) and (c). (See AMC 25.963(g).)

(e)Fuel tanks must comply with the following criteria in order to avoid hazardous fuel leak:

(1)Fuel tanks located in an area where experience or analysis indicates a strike is likely, must be shown by analysis supported by test, or by test to address penetration and deformation by tyre and wheel fragments, small debris from uncontained engine failure or APU failure, or other likely debris (such as runway debris).

(2)All fuel tank access covers must have the capacity to withstand the heat associated with fire at least as well as an access cover made from aluminium alloy in dimensions appropriate for the purpose for which they are to be used, except that the access covers need not be more resistant to fire than an access cover made from the base fuel tank structural material. (See AMC 25.963(e).)

(f)For pressurised fuel tanks, a means with failsafe features must be provided to prevent the build-up of an excessive pressure difference between the inside and the outside of the tank.

(g)(Reserved)

[Amdt 25/3]

[Amdt 25/14]

[Amdt 25/18]

IR · CS 25.963 — CS-25 · ED Decision 2016/010/R · CS-25 Easy Access Rules · EAR revision 26 Jan 2023

AMCAcceptable means of compliance

AMC 25.963(a)Fuel tanks: General

Show the text

Precautions should be taken against the possibility of corrosion resulting from microbiological contamination of fuel.

AMC · AMC 25.963(a) — CS-25 · ED Decision 2003/2/RM · CS-25 Easy Access Rules · EAR revision 26 Jan 2023

AMCAcceptable means of compliance

AMC 25.963(d)Fuel tank strength in emergency landing conditions

Show the text

1.PURPOSE. This AMC sets forth an acceptable means, but not the only means, of demonstrating compliance with the provisions of CS-25 related to the strength of fuel tanks in emergency landing conditions.

2.RELATED CERTIFICATION SPECIFICATIONS. CS 25.561 “Emergency Landing Conditions – General”, CS 25.721 “Landing Gear – General” CS 25.994 “Fuel System Components” CS 25J994 “Fuel System Components”

3.BACKGROUND. For many years the JAA/EASA has required fuel tanks within the fuselage contour to be designed to withstand the inertial load factors prescribed for the emergency landing conditions as specified in JAR/CS 25.561. These load factors have been developed through many years of experience and are generally considered conservative design criteria applicable to objects of mass that could injure occupants if they came loose in a minor crash landing. a. A minor crash landing is a complex dynamic condition with combined loading. However, in order to have simple and conservative design criteria, the emergency landing forces were established as conservative static ultimate load factors acting in each direction independently. b. Recognising that the emergency landing load factors were applicable to objects of mass that could cause injury to occupants and that the rupture of fuel tanks in the fuselage could also be a serious hazard to the occupants, § 4b.420 of the Civil Air Regulations (CAR) part 4b (the predecessor of FAR 25) extended the emergency landing load conditions to fuel tanks that are located within the fuselage contour. Even though the emergency landing load factors were originally intended for solid items of mass, they were applied to the liquid fuel mass in order to develop hydrostatic pressure loads on the fuel tank structure. The application of the inertia forces as a static load criterion (using the full static head pressure) has been considered a conservative criterion for the typical fuel tank configuration within the fuselage contour. This conservatism has been warranted considering the hazard associated with fuel spillage. c. CS 25.963 has required that fuel tanks, both in and near the fuselage, resist rupture under survivable crash conditions. The advisory material previously associated with CS 25.963 specifies design requirements for all fuel tanks that, if ruptured, could release fuel in or near the fuselage or near the engines in quantities sufficient to start a serious fire. d. In complying with this CS requirement for wing tanks, several different techniques have been used by manufacturers to develop the fuel tank pressure loads due to the emergency landing inertia forces. The real emergency landing is actually a dynamic transient condition during which the fuel must flow in a very short period of time to re-establish a new level surface normal to the inertial force. For many tanks such as large swept wing tanks, the effect is that the actual pressure forces are likely to be much less than that which would be calculated from a static pressure based on a steady state condition using the full geometric pressure head. Because the use of the full pressure head results in unrealistically high pressures and creates a severe design penalty for wing tanks in swept wings, some manufacturers have used the local streamwise head rather than the full head. Other manufacturers have used the full pressure head but with less than a full tank of fuel. These methods of deriving the pressures for wing tanks have been accepted as producing design pressures for wing tanks that would more closely represent actual emergency landing conditions. The service record has shown no deficiency in strength for wing fuel tanks designed using these methods. e. FAR 25 did not contain a requirement to apply fuel inertia pressure requirements to fuel tanks outside the fuselage contour, however, the FAA (like the JAA) has published Special Conditions to accomplish this for fuel tanks located in the tail surfaces. The need for Special Conditions was justified by the fact that these tanks are located in a rearward position from which fuel spillage could directly affect a large portion of the fuselage, possibly on both sides at the same time.

4.GENERAL. CS 25.963(d) requires that fuel tanks must be designed, located, and installed so that no fuel is released in quantities sufficient to start a serious fire in otherwise survivable emergency landing conditions. The prescribed set of design conditions to be considered is as follows: a. Fuel tank pressure loads. CS 25.963(d)(1) provides a conservative method for establishing the fuel tank ultimate emergency landing pressures. The phrase “fuel tanks outside the fuselage contour” is intended to include all fuel tanks where fuel spillage through any tank boundary would remain physically and environmentally isolated from occupied compartments by a barrier that is at least fire resistant as defined in CS-Definitions. In this regard, cargo compartments that share the same environment with occupied compartments would be treated the same as if they were occupied. The ultimate pressure criteria are different depending on whether the fuel tank under consideration is inside, or outside the fuselage contour. For the purposes of this paragraph a fuel tank should be considered inside the fuselage contour if it is inside the fuselage pressure shell. If part of the fuel tank pressure boundary also forms part of the fuselage pressure boundary then that part of the boundary should be considered as being within the fuselage contour. Figures 1 and 2 show examples of an underslung wing fuel tank and a fuel tank within a moveable tailplane, respectively, both of which would be considered as being entirely outside of the fuselage contour. The equation for fuel tank pressure uses a factor L, based upon fuel tank geometry. Figure 3 shows examples of the way L is calculated for fuel pressures arising in the forward loading condition, while Figure 4 shows examples for fuel pressures arising in the outboard loading condition. For Jet A(-1) fuel, a typical density of 785.0 kg/m3 (6.55 lb/US gallon) may be assumed. Any internal barriers to free flow of fuel may be considered as a solid pressure barrier provided:

(1)It can withstand the loads due to the expected fuel pressures arising in the conditions under consideration; and

(2)The time “T” for fuel to flow from the upstream side of the barrier to fill the cell downstream of the barrier is greater than 0.5 second. “T” may be conservatively estimated as:

where: V= the volume of air in the fuel cell downstream of the barrier assuming a full tank at 1g flight conditions. For this purpose a fuel cell should be considered as the volume enclosed by solid barriers. In lieu of a more rational analysis, 2% of the downstream fuel volume should be assumed to be trapped air; j = the total number of orifices in baffle rib; Cdi = the discharge coefficient for orifice i. The discharge coefficient may be conservatively assumed to be equal to 1.0 or it may be rationally based upon the orifice size and shape; ai = the area for orifice i; g = the acceleration due to gravity; hi = the hydrostatic head of fuel upstream of orifice i, including all fuel volume enclosed by solid barriers; K = the pressure design factor for the condition under consideration. b. Near the fuselage/near the engines (Compliance with CS 25.963(d)(2).)

(1)For aircraft with wing mounted engines:

(i)The phrase “near the fuselage” is addressing those (parts of) wing fuel tanks located between the fuselage and the most inboard engine;

(ii)The phrase “near the engine” is addressing those (parts of) wing fuel tanks as defined in AMC 20-128A, figure 2, minimum distance of 10 inches (254 mm) laterally from potential ignition sources of the engine nacelle.

(2)For aircraft with fuselage mounted engines, the phrase “near the fuselage” is addressing those (parts of) wing fuel tanks located within one maximum fuselage width outside the fuselage boundaries. c. Protection against crushing and scraping action (Compliance with CS 25.963(d)(4) and CS 25.721(b) and (c).). Each fuel tank should be protected against the effects of crushing and scraping action (including thermal effects) of the fuel tank and surrounding airframe structure with the ground under the following minor crash landing conditions:

(i)An impact at 1.52 m/s (5 fps) vertical velocity on a paved runway at maximum landing weight, with all landing gears retracted and in any other possible combination of gear legs not extended. The unbalanced pitching and rolling moments due to the ground reactions are assumed to be reacted by inertia and by immediate pilot control action consistent with the aircraft under control until other structure strikes the ground. It should be shown that the loads generated by the primary and subsequent impacts are not of a sufficient level to rupture the tank. A reasonable attitude should be selected within the speed range from VL1 to 1.25 VL2 based upon the fuel tank arrangement. VL1 equals to VS0 (TAS) at the appropriate landing weight and in standard sea-level conditions, and VL2 equals to VS0 (TAS) at the appropriate landing weight and altitudes in a hot day temperature of 22.8 degrees C (41 degrees F) above standard.

(ii)Sliding on the ground starting from a speed equal to VL1 up to complete stoppage, all gears retracted and with up to a 20° yaw angle and as a separate condition, sliding with any other possible combination of gear legs not extended and with a 0° yaw angle. The effects of runway profile need not be considered.

(iii)The impact and subsequent sliding phases may be treated as separate analyses or as one continuous analysis. Rational analyses that take into account the pitch response of the aircraft may be utilised, however care must be taken to assure that abrasion and heat transfer effects are not inappropriately reduced at critical ground contact locations.

(iv)For aircraft with wing mounted engines, if failure of engine mounts, or failure of the pylon or its attachments to the wing occurs during the impact or sliding phase, the subsequent effect on the integrity of the fuel tanks should be assessed. Trajectory analysis of the engine/pylon subsequent to the separation is not required.

(v)The above emergency landing conditions are specified at maximum landing weight, where the amount of fuel contained within the tanks may be sufficient to absorb the frictional energy (when the aircraft is sliding on the ground)without causing fuel ignition. When lower fuel states exist in the affected fuel tanks these conditions should also be considered in order to prevent fuel-vapour ignition. d. Engine / Pylon separation. (Compliance with CS 25.721(c) and CS 25.963(d)(5).) For configurations where the nacelle is likely to come into contact with the ground, failure under overload should be considered. Consideration should be given to the separation of an engine nacelle (or nacelle + pylon) under predominantly upward loads and under predominantly aft loads. The predominantly upward load and the predominantly aft load conditions should be analysed separately. It should be shown that at engine/pylon failure the fuel tank itself is not ruptured at or near the engine/pylon attachments. e. Landing gear separation. (Compliance with CS 25.721(a) and CS 25.963(d)(5).) Failure of the landing gear under overload should be considered, assuming the overloads to act in any reasonable combination of vertical and drag loads, in combination with side loads acting both inboard and outboard. In the absence of a more rational analysis, the side loads must be assumed to be up to 20% of the vertical load or 20% of the drag load, whichever is greater. It should be shown that at the time of separation the fuel tank itself is not ruptured at or near the landing gear attachments. The assessment of secondary impacts of the airframe with the ground following landing gear separation is not required. If the subsequent trajectory of a separated landing gear would likely puncture an adjacent fuel tank, design precautions should be taken to minimise the risk of fuel leakage. f. Compliance with the provisions of this paragraph may be shown by analysis or tests, or both.

5.OTHER CONSIDERATIONS a. Supporting structure. In accordance with CS 25.561(c) all large mass items that could break loose and cause direct injury to occupants must be restrained under all loads specified in CS 25.561(b). To meet this requirement, the supporting structure for fuel tanks, should be able to withstand each of the emergency landing load conditions, as far as they act in the 'cabin occupant sensitive directions', acting statically and independently at the tank centre of gravity as if it were a rigid body. Where an empennage includes a fuel tank, the empennage structure supporting the fuel tank should meet the restraint conditions applicable to large mass items in the forward direction.

Figure 1: Diagram of Fuel Tank in Underslung Wing that is Outside of the Fire Resistant Boundary [Figure or form omitted from this preview — available in the Avioverse workspace library.]

Figure 2: Diagram of Fuel Tank Within a Movable Tailplane [Figure or form omitted from this preview — available in the Avioverse workspace library.]

Figure 3 Example of Distances for Fuel Forward Acting Design Pressure Calculations [Figure or form omitted from this preview — available in the Avioverse workspace library.]

Figure 4 – Example of Distances for Fuel Outboard Acting Design Pressure Calculations [Figure or form omitted from this preview — available in the Avioverse workspace library.]

[Amdt 25/3]

AMC · AMC 25.963(d) — CS-25 · ED Decision 2007/010/R · CS-25 Easy Access Rules · EAR revision 26 Jan 2023

AMCAcceptable means of compliance

AMC 25.963(e)Fuel Tank Protection

Show the text

1.PURPOSE. This AMC sets forth a means of compliance with the provisions of CS-25 dealing with the certification requirements for fuel tanks (including skin and fuel tank access covers) on large aeroplanes. Guidance information is provided for showing compliance with the impact and fire resistance requirements of CS 25.963(e).

2.BACKGROUND. Fuel tanks have failed in service due to impact with high speed objects such as failed tyre tread material and engine debris following engine failures. Failure of a fuel tank may result in hazardous fuel leak.

3.IMPACT RESISTANCE. a. All fuel tanks must be designed to address penetration and deformation by tyre fragments, wheel fragments, small debris from uncontained engine failure or APU failure, or other likely debris (such as runway debris), unless the fuel tanks are located in an area where service experience or analysis indicates a strike is not likely. The rule does not specify rigid standards for impact resistance because of the wide range of likely debris which could impact the fuel tanks. The applicant should, however, choose to minimise penetration and deformation by analysis supported by test, or test of fuel tanks using debris of a type, size, trajectory and velocity that represents conditions anticipated in actual service for the aeroplane model involved. There should be no hazardous fuel leak after impact. A hazardous fuel leak results if debris impact to a fuel tank surface (or resulting pressure wave) causes: a) a running leak, b) a dripping leak, or c) a leak that, 15 minutes after wiping dry, results in a wetted aeroplane surface exceeding 15.2 cm (6 in) in length or diameter. The leak should be evaluated under maximum fuel pressure (1g on ground with full fuel volume, and also considering any applicable fuel tank pressurisation). b. The following may be used for evaluating fuel tanks for impact resistance to tyre, wheel, engine and APU debris. Furthermore, protecting the fuel tank against the threats defined in the models below would also protect against threats originating from foreign objects projected from the runway.

(i)Wheel and Tyre Debris - Fuel tanks must be protected against threats from wheel and tyre failures. Refer to AMC 25.734, which provides wheel and tyre failure threat models.

(ii)Engine Debris - The following provides the definition of a debris model to be used for protection of the fuel tanks against the threat of small engine debris (propulsion engines). It also describes how the debris model impacts a surface and a pass-fail criteria is provided. This debris model is considered to be representative of the threat created by engine small non-rotating and rotating parts debris, including ricochets, occurring after an uncontained engine failure event. It is considered to address High Bypass Ratio and Low Bypass Ratio turbine engines. Note: AMC 20-128A remains applicable to engine debris, other than small engine fragments, threatening fuel tanks as described here, and also remains applicable to all engine debris to other areas of the aircraft structures and systems. A. Definition of the debris A solid steel cube with a 9.5 mm (3/8 in) edge length. B. Velocity of the debris The velocity of the cube at the impact is 213.4 m/s (700 ft/s). C. Impact areas and pass-fail criteria Two areas are to be considered. See also Figure 1 below.

(1)± 15-degree area Within 15 degrees forward of the fan plane (or front engine compressor if no fan) measured from the centre of rotation to 15 degrees aft of the rearmost engine turbine plane measured from the centre of rotation, a normal impact is used (i.e. the angle between the trajectory of the debris and the surface is 90 degrees). The impact should not create a hazardous fuel leak (see definition in paragraph 3.a of this AMC). The leak should be evaluated under maximum fuel pressure (1g on ground with full fuel volume, and also considering any applicable fuel tank pressurisation).

(2)Area between – 15 and – 45 degrees (aft of the rearmost engine turbine plane) Within this area, the angle of impact (see Figure 1, α and β angles) is defined by the trajectory of the debris originating from the centre of rotation of the rearmost engine turbine plane. Similarly, as within the ± 15-degree area, the impact should not create a hazardous fuel leak. D. Guidance material When showing compliance with oblique impacts, it is acceptable to consider a normal impact using a debris velocity at impact equal to the normal component of the oblique velocity vector. Orientation of the cube at the impact: testing and analysis should ensure that all orientations (side-on, edge-on, and corner-on) are represented. Impact tests should be completed in adequate number to show repeatable stable localised damage modes and damage extents for all impactor orientations (side-on, edge-on, and corner-on). [Figure or form omitted from this preview — available in the Avioverse workspace library.] Note: α and β angles are examples of possible angles between the fuel tank skin and the debris trajectory at the impact.

Figure 1 — Cube impact angles [Figure or form omitted from this preview — available in the Avioverse workspace library.] Figure 2 — Example of the ± 15-degree threat area representation Note: The threat area between – 15 and – 45 degrees is not represented.

(iii)APU Debris — For small APU debris, the small fragment model as defined in AMC 20-128A applies. The impact should not create a hazardous fuel leak (as defined in paragraph 3.a above). Note: AMC 20-128A remains applicable to APU debris, other than small APU fragments, threatening fuel tanks as described here, and also remains applicable to all APU debris to other areas of the aircraft structures and systems.

4.RESISTANCE TO FIRE Fuel tank access covers meet the requirements of CS 25.963(e)(2) if they are fabricated from solid aluminium or titanium alloys, or steel. They also meet the above requirement if one of the following criteria is met. a. The covers can withstand the test of AC 20-135, “Powerplant Installation and Propulsion System Component Fire Protection Test Methods, Standards, and Criteria”, issued 2/9/90, or ISO 2685-1992(E), “Aircraft Environment conditions and test procedures for airborne equipment - Resistance to fire in designated fire zones”, for a period of time at least as great as an equivalent aluminium alloy in dimensions appropriate for the purpose for which they are used. b. The covers can withstand the test of AC 20-135, Powerplant Installation and Propulsion System Component Fire Protection Test Methods, Standards, and Criteria, issued 2/9/90, or ISO 2685-1992(E), Aircraft - Environment conditions and test procedures for airborne equipment - Resistance to fire in designated fire zones, for a period of time at least as great as the minimum thickness of the surrounding wing structure. c. The covers can withstand the test of AC 20-135, Powerplant Installation and Propulsion System Component Fire Protection Test Methods, Standards, and Criteria, issued 2/9/90, or ISO 2685-1992(E), Aircraft - Environment conditions and test procedures for airborne equipment - Resistance to fire in designated fire zones, for a period of 5 minutes. The test cover should be installed in a test fixture representative of actual installation in the aeroplane. Credit may be allowed for fuel as a heat sink if covers will be protected by fuel during all likely conditions. The maximum amount of fuel that should be allowed during this test is the amount associated with reserve fuel. Also, the static fuel pressure head should be accounted for during the burn test. There should be no burn-through or distortion that would lead to fuel leakage at the end of the tests; although damage to the cover and seal is permissible.

[Amdt 25/3]

[Amdt 25/14]

AMC · AMC 25.963(e) — CS-25 · ED Decision 2013/033/R · CS-25 Easy Access Rules · EAR revision 26 Jan 2023

AMCAcceptable means of compliance

AMC 25.963(g)Fuel tanks: General

Show the text

(Revoked)

[Amdt 25/3]

AMC · AMC 25.963(g) — CS-25 · ED Decision 2007/010/R · CS-25 Easy Access Rules · EAR revision 26 Jan 2023

All rules in SUBPART E – POWERPLANT

Consolidated from the EASA Easy Access Rules (revision 26 Jan 2023, extracted 17 Aug 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.

Ask Metis about CS 25.963 →

Metis opens with Avioverse in October 2026 · request early access.