diff --git a/make-ca/.footprint b/make-ca/.footprint
index 847774543..1378ef990 100644
--- a/make-ca/.footprint
+++ b/make-ca/.footprint
@@ -2,6 +2,7 @@ drwxr-xr-x	root/root	etc/
 drwxr-xr-x	root/root	etc/make-ca/
 -rw-r--r--	root/root	etc/make-ca/CS.txt
 -rw-r--r--	root/root	etc/make-ca/make-ca.conf.dist
+-rw-r--r--	root/root	etc/make-ca/mozilla-ca-root.pem
 drwxr-xr-x	root/root	usr/
 drwxr-xr-x	root/root	usr/lib/
 drwxr-xr-x	root/root	usr/lib/make-ca/
diff --git a/make-ca/.signature b/make-ca/.signature
index 40cd070f1..d8724f8e1 100644
--- a/make-ca/.signature
+++ b/make-ca/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/enxl/jH0NIbvIFgPZ+bCCUMJeJDvRyC4etVA6JhJWZ8147GxrKBkcMGcb8jIqhpxSO87pKu6qd0qcPyNYA4Nw4=
+RWSE3ohX2g5d/eTW213dxH0t2JWF4hh0RGV8xqoL9l2d2JmdcMdwp2+23Lfs4/sUCYFTj9DwKTl2t1TapBtcUersXWuKLze+kQE=
 SHA256 (Pkgfile) = 9c29a9c48fdbd38112c68094c0d1e14fe40347c0d49b9c207910b72948edac1a
-SHA256 (.footprint) = 25a97ebbdb350b1c50264c7d312738985460812c244174518201da84ec208722
+SHA256 (.footprint) = e9d2a7d150dbd8bb5044e95d9c84f47037d49cf0882b3f6b18556681ca9f54dc
 SHA256 (make-ca-1.12.tar.gz) = 49dac64b7768a285030bf032bdbe5ad6ea6dafecd297ba9688b0bfa198f5e857