Ask why airliners cruise at about 40,000 feet and you get one of two answers. The aerodynamic one: they are pressed up against the coffin corner, where the stall and the speed of sound close in from both sides. The regulatory one: flight level 410 is simply the top of the airspace.

Both are half right, and the half that is wrong is the interesting part. Read the actual type certificates and the tidy story falls apart. The Airbus A320 family is certified to 39,100 feet, not 41,000. The Boeing 787-8 and 787-9, the 777-300ER and the A350-900 are all certified to 43,100 feet, comfortably above the level everyone calls the ceiling. And a Gulfstream G650 is signed off to 51,000.

So there is no single ceiling. There are four of them, they are set by four completely different things, and they happen to bite within a few thousand feet of each other. Here they are, in the order they arrive.

Ceiling One: The Engine Runs Out of Air

A jet engine is a machine for accelerating air, and above about 36,000 feet there is very little of it. Computed from the defining constants of the International Standard Atmosphere, sea level gives you 1,013 hPa, 14.7 psi and 1.225 kg per cubic metre at plus 15 C. At 40,000 feet the same table gives 188 hPa, 2.72 psi and 0.302 kg per cubic metre at minus 56.5 C. The air is a shade under a quarter as dense.

Thrust follows that down, and the fall is steeper than most people expect. A NASA Glenn design study of a modern high-bypass turbofan in the 22,000 lbf class lists 22,000 lbf at sea-level static, 3,931 lbf at top of climb at 35,000 feet and Mach 0.80, and 3,145 lbf in cruise at the same point. Top-of-climb thrust is under a fifth of the sea-level static rating. Those are design-point requirements rather than maximum available thrust, and they are for 35,000 feet rather than 40,000, but the shape of the curve is unmistakable.

The tropopause is what turns that into a hard limit. In the standard atmosphere it sits at a pressure altitude of 36,089 feet at minus 56.5 C, and above it the temperature stops falling. Below the tropopause every thousand feet of climb buys colder, denser-than-otherwise air that helps the engine. Above it you keep losing pressure and get nothing back. That is why the practical cruise band sits just above the tropopause and the ceiling only a few thousand feet higher.

Ceiling Two: The Aerodynamic Squeeze, and Why It Is Not What You Think

This is the famous one. As you climb, indicated airspeed falls away from true airspeed, so the speed at which the wing buffets at 1 g creeps up while the Mach limit stays put. Squeeze the two together and you run out of envelope. We have a whole piece on the coffin corner, so here is the FAA's own definition of what happens at the top.

Read the middle of that carefully, because it is the bit everyone skips: the aerodynamic ceiling is higher than the limit in the flight manual. The certified ceiling is not the coffin corner. It sits below it, with margin deliberately built in.

How much margin? Certification requires 0.3 g of buffet margin throughout the envelope up to the maximum operating Mach number, at any weight. The late Jacques Rosay, Airbus's former chief test pilot, spelled out what that means in the company's own Safety First journal, and his conclusion is bracing.

That does not make the aerodynamics irrelevant. The FAA's circular gives a worked example: a typical turbojet at 51,000 feet and 1 g might meet Mach buffet just above an MMO of 0.82 and low-speed buffet at 0.60, and only 1.4 g may be enough to bring on buffet at the optimum 0.73. Load factor and weight eat the margin, so a maximum cruising altitude has to be chosen that still leaves enough for manoeuvring and gusts. But the aircraft is kept away from the merge point by design, not saved from it by luck.

Ceiling Three: What the Fuselage Is Certified to Hold

A pressurised tube at 40,000 feet is holding a real load. Keep the cabin at the 8,000-foot maximum the rules allow and the standard atmosphere puts 752 hPa, or 10.9 psi, on the inside and 188 hPa, or 2.7 psi, on the outside: a differential of about 8.2 psi over every square inch of fuselage skin, cycled on every flight. That load is what fatigues an airframe, and the certification rule that sets it is short and specific.

The same section requires the airframe to keep occupants below 15,000 feet of cabin altitude after any probable pressurisation failure, and below 25,000 feet for more than two minutes or 40,000 feet for any duration after a decompression from a failure that is not extremely improbable. It also mandates two pressure relief valves to limit the positive pressure differential to a predetermined value — and there the regulation stops. It requires a differential limit without naming one, because the number belongs to the type design.

Which is why you should distrust every psi figure you find online. We went looking for maximum cabin pressure differentials in the type certificate data sheets and in the manufacturers' own airport-planning documents, including the 737 MAX volume, and found none. The numbers that circulate for the 737 and the 787 trace back to forums. They live in the flight manual, which is not a public document.

What is on the record is the consequence. The 737's type certificate notes that airplanes modified by Boeing's Lower Cabin Altitude design change can hold a cabin altitude of 6,500 feet instead of the standard 8,000 when cruising at 41,000 feet. That is the pressure-differential ceiling made visible: same altitude, more structure, a more comfortable cabin. Our piece on why cabins are pressurised to around 6,000 feet covers the comfort side.

Ceiling Four: The Rules That Start at FL410

The fourth ceiling is written down, and it is the one that actually explains the number everybody quotes. Reduced Vertical Separation Minimum airspace, where controllers separate traffic by 1,000 feet instead of 2,000, runs from FL290 to FL410 inclusive. Above FL410 the separation reverts, which is why non-RVSM aircraft are sent to FL430 and above.

The regulation that defines the RVSM flight envelope also happens to summarise this entire article in one clause. The envelope extends from FL290 up to the lowest of three things: FL410, the maximum certificated altitude for the aircraft, or the altitude limited by cruise thrust, buffet, or other flight limitations. The rulemakers listed the same four ceilings we have just walked through, in the same order, and told operators to take whichever arrives first.

Then there is oxygen, and this is the only one of the four with a documented physiological reason on the record. Under 14 CFR 121.333, above FL250 one pilot must wear and use an oxygen mask at all times — unless every flight crewmember has a quick-donning mask, which buys an exception, and for large airliners that exception applies only at or below flight level 410. Above FL410 the mask goes on and stays on.

Why 410? Because of how long you have. When the FAA declined a petition to raise the no-mask level, it published the arithmetic.

Sixteen seconds on average. Eight in the worst case observed. At FL350 the mean is 34 seconds and the minimum 17. The FAA's conclusion was that safety would be compromised if the only pilot on the flight deck at FL410 were not already wearing a mask, and Canada draws the line in the same place. If you want to know what happens on the way down, our piece on FAR 91.211 and time of useful consciousness goes through it.

One honest caveat, because it matters. The RVSM ceiling and the oxygen threshold are both FL410, and it is tempting to say one caused the other. We read the FAA's domestic RVSM final rule and it gives no technical rationale for choosing FL410 at all. Two separate histories landed on the same number. Only the oxygen side has a reason on the record.

What the Type Certificates Actually Say

Put the paperwork side by side and the pattern is clear: the 41,000-foot ceiling is a regulatory convention that the airframes straddle in both directions. Two of the world's most common narrowbodies cannot legally reach it without a modification. Three widebodies are certified 2,100 feet above it.

The A320 line is worth reading twice. Its type certificate gives 39,100 feet as standard, 39,800 with one modification embodied and 41,000 with another — and the sheet does not separate the ceo from the neo, so an A320neo reaches 41,000 feet only with modification 162744. The A380's certificate declines to publish a figure at all and defers to the flight manual, which is why we have left it out rather than repeat the number that circulates.

Pinnacle 3701: What the Ceiling Looks Like From Inside

On the evening of 14 October 2004 a Bombardier CL-600-2B19, a CRJ-200 operating as Pinnacle Airlines Flight 3701, was being repositioned empty from Little Rock to Minneapolis. The two pilots took it to 41,000 feet, the type's certified maximum. The NTSB report records that pilots at the airline had talked about an informal flight level 410 club, of which management said they were unaware.

The flight data recorder shows what the fourth ceiling looks like when you insist. The aircraft climbed from 37,000 to 41,000 feet while its airspeed decayed from 203 knots and Mach 0.63 to 163 knots and Mach 0.57. It levelled at 41,000 feet at an angle of attack of 5.7 degrees. The day was not standard: the temperature at altitude was minus 47.1 C, some 9.4 C warmer than the standard atmosphere, which by itself pushes the achievable ceiling down.

The NTSB is careful about what that number means, and the distinction is the point of this whole article: for the CRJ-200 the 41,000-foot maximum operating altitude represents the maximum capability of the airplane, with actual altitude capability depending primarily on airspeed, weight and ambient temperature. A ceiling is a condition, not a line painted on the sky.

Both engines flamed out. The cores stopped turning and locked, and neither could be restarted. The board found the airplane could have been sustained at 41,000 feet had the airspeed been held at Mach 0.7. Its probable cause names the pilots' unprofessional behaviour, deviation from standard operating procedures and poor airmanship, in part because of inadequate training, their failure to prepare for an emergency landing in time, and their mismanagement of the double engine failure checklist; core lock and flight manuals that failed to communicate the minimum airspeed needed to keep the cores rotating were contributing factors. Both pilots were killed.

The safety recommendation that followed asked the FAA to work with industry on high-altitude training for regional jet pilots, so that they would possess a thorough understanding of the airplanes' performance capabilities, limitations and high altitude aerodynamics. A simulator instructor had told investigators that 41,000 feet was not an altitude at which pilots wanted to operate, and the airline's CRJ programme manager said the service ceiling was mentioned in ground school but never discussed or demonstrated in the simulator.

Mentour Pilot walks through Pinnacle 3701 from the cockpit's point of view.

Why the Best Altitude Keeps Climbing

None of this explains why crews want to be up there in the first place. The answer is specific air range: for any weight there is an altitude where you get the most distance per kilogram of fuel, and Airbus's getting to grips with fuel economy sets out the relationship in one line. At the optimum altitude the aircraft is flying at the best lift-to-drag ratio for the chosen Mach number, and the condition for staying there is that weight divided by ambient static pressure stays constant.

Burn fuel and the weight falls, so the pressure has to fall with it. The optimum altitude climbs through the flight. The ideal would be a continuous climbing cruise, and the same document says plainly why that does not happen: air traffic control constraints, performance and buffet limits do not make it possible, so the aircraft steps up instead, staying as close to the optimum as the system allows. Every step climb you feel on a long flight is that equation being obeyed in 2,000-foot increments.

And the ceiling is simply where the steps run out. Not a wall of physics, but the first of four limits to arrive on that particular day, at that particular weight, at that particular temperature.

The Ones That Go Higher

Business jets break the pattern because they are small, light, strongly built and have wings sized for thin air. The Gulfstream G650 and G650ER are certified to 51,000 feet, as are the Bombardier Global 5000, 6000 and 6500; the Citation Longitude is quoted by Textron at 45,000. All of them sit above RVSM airspace at cruise, which is a scheduling advantage as much as an engineering one.

Then there is the outlier that makes every airliner figure look timid. Concorde's FAA type certificate gives a maximum operating altitude of 60,000 feet. It got there by being a supersonic delta with military-grade structure and engines that behaved better the faster they went, and it needed the altitude to make the economics work at all.

Military aircraft go further still, and for the same reasons in reverse: they trade payload, range and comfort for altitude. The U-2 Dragon Lady and the SR-71 Blackbird operate in a regime where the pilot wears a pressure suit because the cabin cannot be kept survivable by pressurisation alone, and where the margin between minimum and maximum speed narrows to a few knots. That is the genuine aerodynamic ceiling, and it is why those aircraft exist as separate species rather than as tall airliners.

Scott Manley on what it takes to design an aircraft for genuinely extreme altitude.

So the next time someone tells you airliners stop at 41,000 feet because of the coffin corner, the honest answer is that they mostly stop there because a line in Part 91 Appendix G, a mask rule built on sixteen seconds of consciousness, an 8,000-foot cabin and an engine with a fifth of its thrust left all arrive at about the same place. The aerodynamics are real. They are just not the wall.

Captain Joe covers the coffin-corner version of the story, which is the one most pilots are taught.

Sources: EASA Type Certificate Data Sheets EASA.A.064, IM.A.120, EASA.IM.A.115, IM.A.003, EASA.A.151, EASA.IM.A.570, EASA.IM.A.169 and EASA.IM.A.009; FAA Type Certificate Data Sheet A45EU (Concorde); 14 CFR 25.841, 91.211, 121.333 and Part 91 Appendix G via eCFR; FAA Advisory Circular AC 61-107B CHG 1; FAA Advisory Circular AC 00-6B; FAA final rule Supplemental Oxygen, 70 FR 68330; NTSB Aircraft Accident Report NTSB/AAR-07/01; Airbus Safety First #20, July 2015; Airbus getting to grips with fuel economy, Issue 4; NASA Glenn Research Center, NTRS 20220017455; Textron Aviation. Standard-atmosphere values computed from the ISA defining constants.