The Rafale’s MkF16F ejection seat can save a pilot even when the aircraft is stationary. Here’s how its pyrotechnic sequence transforms two seconds of violence into survival.
In summary
The Dassault Rafale is fitted with the Martin-Baker MkF16F ejection seat, manufactured by Safran Martin-Baker France. Its so-called zero-zero capability means it can eject a pilot from an aircraft that is stationary on the ground, with no speed or altitude, provided the aircraft is in a near-horizontal attitude. This performance relies on a complex pyrotechnic sequence. The canopy is not simply jettisoned; it is cut away. The seat is then propelled out of the cockpit by an ejection gun and a rocket motor. Mechanisms stabilise the assembly, trigger the opening of the parachute and automatically separate the pilot from the seat. The entire operation takes place in a matter of seconds. It remains a physically brutal experience. Modern seats generally subject the pilot to an acceleration of around 12 to 14 g, with loads that can increase depending on conditions. The system does not promise a painless ejection. It offers a chance of survival when no other option exists.
The ‘zero-zero’ promise eliminates the former reliance on speed
The first ejection seats required a minimum margin. The aircraft had to be flying high enough or fast enough for the seat to move away from the airframe and for the parachute to have time to deploy.
This constraint left the pilot with no recourse during certain critical phases. A fire on start-up, an engine explosion whilst taxiing or a runway excursion could render the aircraft uninhabitable whilst it was still on the ground. The seat did not always guarantee sufficient height to open the canopy before impact.
The Rafale’s MkF16F is certified for ejection at zero altitude and zero speed. However, its official documentation specifies an important condition: the aircraft must be nearly horizontal. This stipulation is essential.
Zero-zero technology does not mean that a pilot can survive in any position. An aircraft that is upside down, at a steep angle or pointing towards the ground alters the ejection seat’s trajectory. The rocket may then propel the occupant sideways or towards an obstacle.
The term ‘zero-zero’ therefore describes a point within the ejection envelope. It does not imply universal invulnerability.
On a stationary Rafale, the system must perform on its own what the aircraft’s speed would normally facilitate. It must clear the canopy, lift the pilot, stabilise his trajectory and deploy the parachute at very low altitude. It cannot rely on either the relative wind or the energy generated by the aircraft’s movement.
This capability has a practical use. Emergency situations on the ground are not uncommon in combat aviation. An engine may catch fire during start-up. Ammunition may be threatened by fire. A landing gear may collapse. An aircraft may become uncontrollable during an aborted take-off.
In such circumstances, a matter of seconds can be the difference between a standard evacuation and an immediate ejection.
The MkF16F transforms the seat into a complete survival system
The term ‘ejection seat’ paints an incomplete picture.
The MkF16F is not simply a chair attached to a large rocket. It is an integrated system comprising the propulsion unit, the pilot’s restraints, emergency oxygen, stabilising parachutes, the main canopy and a survival kit.
Martin-Baker designed this family of seats to reduce weight whilst maintaining a high ejection capacity. The two outer cylinders of the telescopic barrel serve both as the main structure and as components of the propulsion system. This design avoids the need for multiple heavy parts.
The seat is rated for a fully equipped crew weight of between 63.5 and 106 kilograms. Its published service ceiling extends up to 19,812 metres, or 65,000 feet. Its maximum ejection speed is stated as 625 KCAS, a corrected speed used to express the aerodynamic loads experienced by the aircraft and its occupant.
These limits cover radically different environments.
When stationary, the challenge is to gain sufficient altitude. At high speed, the challenge becomes aerodynamic drag. At high altitude, it is necessary to prevent premature separation and to supply oxygen to the pilot. The same seat must adapt its sequence to these contrasting situations.
The MkF16F uses a mechanical selector linked to a barostatic unit. This unit takes atmospheric pressure into account. A limiter linked to the load factor also helps to control the sequence.
The system includes an automatic backup unit. The pilot also retains the option of manual control during certain phases. This redundancy is essential. An ejection may occur following an electrical failure, an impact or significant damage to the aircraft.
Activation triggers an irreversible pyrotechnic sequence
The pilot initiates ejection by pulling the central handle located between their legs, on the seat base. This position allows the pilot to grip the handle with both hands and promotes a relatively symmetrical posture.
Once the required force is applied, the handle activates a gas-operated firing system. The sequence then becomes automatic. It cannot be stopped.
The restraint systems are immediately activated. The arms are pulled in towards the body by active devices. The legs are passively restrained to prevent them from striking the instrument panel or the edges of the cockpit.
This immobilisation is by no means incidental. At high speeds, the relative wind can fling a limb with sufficient force to cause a fracture or dislocation. An incorrect position can also misalign the spine in relation to the seat’s thrust axis.
The integrated harness must support the pelvis, torso and shoulders. Its adjustment directly affects the risk of injury. A body that is not properly secured against the backrest shifts position before the thrust is applied. The impact is then more severe.
The accidental ejection that occurred on board a Rafale B at Saint-Dizier in March 2019 demonstrated the importance of this system. The rear passenger was not sufficiently secured. His helmet was not properly fastened. He lost it during the ejection. He nevertheless survived with minor injuries.
This case does not prove that safety precautions are of secondary importance. On the contrary, it demonstrates that the seat can save a life even with a compromised configuration, but at the cost of an additional risk.
The canopy is cut away before the ejection seat is deployed
On the Rafale, the canopy is not ejected as a complete unit before the ejection seat. The MkF16F technical data sheet explicitly states that there is no canopy jettison system. The aircraft uses a cutting device supplied by Dassault Aviation.
This distinction is important.
Ejecting the canopy requires unlocking it, lifting it and then moving it out of the pilot’s path. This operation takes time. It can also be disrupted if the aircraft is stationary, if its attitude is unusual or if the mechanisms are damaged.
The Rafale therefore uses a pyrotechnic cord designed to cut the canopy. The explosion weakens and fractures the transparent surfaces along a predetermined path. The seat then passes through the opening created.
The term ‘canopy break’ might suggest a random rupture. In reality, it is a precisely calibrated operation. The charges must be activated before the seat moves. Their energy must create a passage whilst limiting the size and trajectory of the fragments.
The incident at Saint-Dizier provided a real-life demonstration of the system. The State Aviation Safety Accident Investigation Bureau found that both halves of the canopy had been correctly cut away. Residues of pyrotechnic powder were found on the passenger’s face and helmet.
The cutting process is therefore still aggressive. It produces noise, gases and fragments. However, it remains preferable to a collision between the seat and an intact canopy.
The ejection slide propels the seat before the rocket reaches full height
Once the passage has been opened, the telescopic ejection slide propels the seat along its rails. The initial role of the cannon is to rapidly extract the entire cockpit assembly and set it on a controlled trajectory.
Safran states an ejection speed of approximately 15 metres per second, or 54 kilometres per hour. This figure does not correspond to the final speed of the entire trajectory. It gives an order of magnitude for the speed at which the seat leaves the aircraft.
The ejection seat does not operate alone.
The MkF16F features a rocket motor fitted beneath the seat. This provides continued thrust after the cockpit has been ejected. Unlike a very brief explosive charge, a rocket motor delivers its energy over a longer period. It allows the pilot to gain altitude without relying solely on an instantaneous peak acceleration.
A second lateral rocket motor helps to control the ejection path or trajectory. This function is particularly important on an aircraft where the tail fin, fuselage or second seat may be within the ejection zone.
The combination of the rocket motor and the rocket forms the core of the zero-zero capability. The rocket motor provides the initial ejection. The rocket motor provides the altitude required for the parachute to deploy.
At high speed, the same propulsion system must ensure rapid separation before the seat encounters the turbulence generated by the aircraft. The flight path then becomes a compromise between clearance, physiologically tolerable acceleration and aerodynamic stability.
Small parachutes stabilise the seat before the main canopy opens
Upon exiting the aircraft, the seat is not necessarily correctly oriented. It may rotate, tilt or be deflected by the relative wind.
The system therefore deploys a stabilising parachute, often called a drogue.
Its function is not to lower the pilot directly. It serves to slow down and orient the seat-occupant assembly before the main parachute opens.
The deployment of the stabilising parachute is controlled by a cartridge. It therefore does not depend solely on airflow. This feature is important at low or zero speed.
At high speed, the main parachute cannot open immediately. The impact of opening would be too violent. The canopy could be damaged. The pilot could suffer severe G-forces to the pelvis, back or neck.
The system therefore delays separation and uses the drogue to reduce speed.
At high altitude, the barostatic unit also prevents premature opening. The pilot remains strapped to the seat and has an emergency oxygen cylinder. Separation occurs when the altitude and speed become suitable for deploying the main parachute.
When coming to a standstill on the ground, the logic is reversed. The sequence must be accelerated. The rocket gains a few tens of metres. The canopy is deployed rapidly. The seat separates from the pilot so that the pilot can descend under the parachute.
It is this adaptability that distinguishes a modern system from a simple ejection charge.
The two seconds provide an order of magnitude, not a constant
The claim that the entire Rafale sequence lasts exactly two seconds needs to be qualified.
Martin-Baker publicly demonstrates a modern sequence in which the ejection seat leaves the cockpit after approximately 0.1 seconds. Stabilisation begins in the following fractions of a second. The main parachute is deployed at around one second. Separation between the ejection seat and the occupant occurs at around 1.5 seconds. The canopy is fully inflated at around two seconds.
However, this demonstration is based on a high-speed test of a seat from a different variant. It illustrates the general operation of a modern Martin-Baker system. It does not constitute a certified timeline that is identical for every ejection from the MkF16F.
The actual duration depends on altitude, speed, the aircraft’s attitude and the selected operating mode. At high altitude, separation may be delayed. At high speed, the seat must first be stabilised and braked. At zero speed, the priority is to deploy the parachute as quickly as possible once the required altitude has been reached.
Saying that ejection takes around two seconds is therefore a reasonable way of explaining the extreme speed of the process. Presenting this duration as a fixed value would be technically incorrect.
Aviation medicine literature often cites a figure of around 2.5 seconds between pulling the handle and the full deployment of the parachute for a typical modern sequence. The difference from the two-second figure stems in particular from the definition used: the start of opening, full inflation or deployment of the survival kit.
G-forces save the pilot whilst threatening their spine
The figure of 14 to 22 g is frequently associated with ejection seats. This, too, must be treated with caution.
The public documentation for the MkF16F does not publish a precise maximum value for the G-force imposed on the pilot. Publications on aviation medicine generally place modern ejection seats at around 12 to 14 g during the initial propulsion phase.
Higher peaks may occur depending on the seat model, the occupant’s weight, their posture, the aircraft’s speed and the dynamics of the sequence.
A value of 20 g or more is therefore physically plausible under certain circumstances. It should not be presented as the standard nominal load on the Rafale’s seat.
One g corresponds to an acceleration of 9.81 metres per second squared. Under 14 g, a pilot weighing 80 kilograms experiences an axial load equivalent to approximately 11,000 newtons. This force is exerted for a very short duration, but it acts through the pelvis and the spine.
Duration alone is not sufficient to define the danger. The rate at which the acceleration increases is also a factor. This parameter is sometimes referred to as ‘jolt’. A sudden increase from 1 to 14 g can be more damaging than a more controlled rise to a comparable value.
The most common injuries involve vertebral compression fractures. The risk increases when the pilot is leaning forward, not properly strapped in, or off-centre relative to the seat’s axis. Limbs may be injured by the blast. The neck is at risk from the weight of the helmet and from head movements.
The pilot must therefore, when time permits, adopt an upright position with their back pressed firmly against the seatback. In a real emergency, this ideal posture is not always possible. The seat is specifically designed to function in a situation where the occupant may be disoriented, injured or subjected to high G-forces.
A successful ejection does not necessarily mean there will be no after-effects. It means that the system has replaced what would likely have been a fatal accident with a potentially survivable injury.
The Rafale B coordinates two seats whilst preventing them from colliding
The Rafale C and Rafale M are single-seaters. Their ejection system only needs to manage a single occupant.
The Rafale B presents an additional challenge. Its two seats are arranged one behind the other. A simultaneous and perfectly parallel ejection could place the occupants on trajectories that are too close together.
The aircraft is therefore equipped with a two-mode inter-seat sequencing system, supplied by Dassault Aviation. It coordinates the sequence of canopy separation and ejection seat activation. A pyrotechnic delay prevents the two units from colliding.
The 2019 incident highlighted the complexity of this design. The rear passenger inadvertently pulled his handle. His seat deployed normally. The front canopy was also cut away, as the sequence was designed to command the coordinated evacuation of the crew.
However, the pilot’s seat did not deploy. An internal fault in the pyrotechnic selector prevented the final command from being transmitted. The pilot retained control of the Rafale and managed to land without a canopy or rear seat.
The fault could have had catastrophic consequences in a genuine emergency requiring the evacuation of both occupants. In this particular case, paradoxically, it prevented the abandonment of an aircraft that was still airworthy.
The Accident Investigation Bureau has requested a corrective measure to restore the selector’s reliability. This incident serves as a reminder that an ejection seat cannot be assessed in isolation. Its success also depends on the aircraft’s pyrotechnic systems, the canopy and the coordination system between the seats.
Maintenance treats the seat as precision ammunition
The MkF16F contains cartridges, rocket motors, delay mechanisms and pyrotechnic transmission lines. These components age. They are sensitive to storage conditions, humidity and thermal cycles.
Maintenance therefore involves more than simply inspecting the harness or lubricating the rails. Pyrotechnic components have defined service lives. They must be checked and replaced according to a strict schedule.
The ejection seat has been designed with a modular approach. Martin-Baker states that it can be removed or installed in a matter of minutes without removing the canopy. Its main components remain accessible from the cockpit.
This ease of access reduces the aircraft’s downtime. It does not, however, lower the technical standards. A faulty connection, a non-compliant cartridge or an incorrectly fitted harness component can compromise the entire sequence.
Safran stated in 2016 that the seats produced by its joint venture were reconditioned every two years and underwent a general overhaul every six years. The exact intervals may vary depending on the fleet and maintenance policies.
The company is responsible for both the production and support of seats for French fighter aircraft. This industrial continuity ensures that expertise is retained in pyrotechnic devices, parachutes and integration into Dassault Aviation airframes.
The Martin-Baker factsheet published in 2025 listed more than 500 F-16F seats in service and 6 lives saved. These figures remain modest compared to the thousands of rescues claimed by the manufacturer across its entire product range. They are mainly due to the size of the Rafale fleet and its relatively low accident rate.
The pilot’s last chance remains a rather rough-and-ready mechanism
The Rafale’s zero-zero ejection seat is an engineering triumph because it has to resolve several conflicting requirements.
It must be powerful enough to eject a pilot from the ground. It must operate gradually enough to minimise fractures. It must function at altitudes of over 19,000 metres as well as at sea level. It must withstand speeds of up to 625 KCAS. It must operate without the aircraft’s normal power supply. Finally, it must accomplish all this before the pilot can actually comprehend what is happening to them.
The MkF16F does not make ejection safe in the conventional sense of the term. A pyrotechnic charge cuts through the canopy just a few centimetres from the pilot’s face. A cannon propels the seat forward. A rocket accelerates the body. Parachutes deploy in a succession of impacts.
Technology does not eliminate violence. It organises it.
The zero-zero capability illustrates this logic with particular clarity. When a Rafale is stationary, the ejection seat must, in a fraction of a second, generate its own speed, its own altitude and its own survival trajectory.
The pilot may emerge injured. He may lose his helmet, suffer spinal compression or be burned by pyrotechnic residues. But he has a way out where previous generations had none.
This difference lies in a mechanism that remains invisible for almost the entire life of the aircraft. On the day it is used, however, it becomes the most important system on the Rafale.
Sources
Martin-Baker Aircraft Company, F16F Ejection Seat for Rafale, technical data sheet 2025: zero-zero capability, operational range, propulsion, parachutes, harness and canopy cutting system.
Safran, Safran’s Contribution to the Rafale: manufacture of the seats by Safran Martin-Baker France and approximate ejection speed of 15 metres per second.
State Aviation Safety Accident Investigation Bureau, report A-2019-03-I: accidental ejection aboard Rafale B number 358, operation of the canopy, rear seat and inter-seat system.
Martin-Baker Aircraft Company, interactive presentation of how a modern ejection system works: propulsion, stabilisation, main parachute and seat-occupant separation. The illustrated timeline relates to a separate modern test of the MkF16F and serves as an order of magnitude.
Martin-Baker Aircraft Company, press release of 20 April 2020 on the incident involving the Rafale B at Saint-Dizier and the operation of the MkF16F seat.
Indian Journal of Aerospace Medicine, ‘Ejection in Unusual Aircraft Attitude: A Case Report’: typical accelerations of modern ejection seats, the general duration of a sequence and the risks of spinal injuries.
Safran, ‘250th Rafale Ejection Seat Produced by Safran/Martin-Baker Joint Venture’, 19 January 2016: industrial organisation and the maintenance schedule published at the time.
Live a unique fighter jet experience