diff --git a/airootfs/etc/pacman-snapshot.conf b/airootfs/etc/pacman-snapshot.conf
index 086410e..9a0a36d 100644
--- a/airootfs/etc/pacman-snapshot.conf
+++ b/airootfs/etc/pacman-snapshot.conf
@@ -18,6 +18,12 @@
 HoldPkg     = pacman glibc
 #XferCommand = /usr/bin/curl -C - -f %u > %o
 #XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
+
+# wrap downloading in a faketime call that uses the real "today" as date
+# this is to counter the faketime date introduced when running "pacman-faketime"
+# necessary to deal with TLS certificate lifetimes
+XferCommand = /usr/bin/faketime "today" /usr/bin/curl --continue-at - --output "%o" --fail --location "%u"
+
 #CleanMethod = KeepInstalled
 #UseDelta    = 0.7
 Architecture = auto