diff --git a/make/archives.mk b/make/archives.mk
index 766743cf..c11c5e4e 100644
--- a/make/archives.mk
+++ b/make/archives.mk
@@ -376,6 +376,3 @@ $(ARCHIVE)/$(LIBDPF_SOURCE):
 LINKS_VER = 2.17
 $(ARCHIVE)/links-$(LINKS_VER).tar.bz2:
 	$(WGET) http://links.twibright.com/download/links-$(LINKS_VER).tar.bz2
-
-$(ARCHIVE)/cacert.pem:
-	$(WGET) https://curl.haxx.se/ca/cacert.pem
diff --git a/make/system-tools.mk b/make/system-tools.mk
index 78f13b12..bd155dc6 100644
--- a/make/system-tools.mk
+++ b/make/system-tools.mk
@@ -1252,7 +1252,14 @@ $(D)/popt: $(ARCHIVE)/$(POPT_SOURCE) | $(TARGET_DIR)
 
 # -----------------------------------------------------------------------------
 
-$(D)/ca-bundle: $(ARCHIVE)/cacert.pem | $(TARGET_DIR)
-	curl --remote-name --time-cond $(ARCHIVE)/cacert.pem https://curl.haxx.se/ca/cacert.pem
-	install -D -m 0644 $(ARCHIVE)/cacert.pem $(TARGET_DIR)/$(CA-BUNDLE_DIR)/$(CA-BUNDLE)
+CA-BUNDLE_SOURCE = cacert.pem
+CA-BUNDLE_URL = https://curl.haxx.se/ca/$(CA-BUNDLE_SOURCE)
+
+$(ARCHIVE)/$(CA-BUNDLE_SOURCE):
+	$(WGET) $(CA-BUNDLE_URL)
+
+$(D)/ca-bundle: $(ARCHIVE)/$(CA-BUNDLE_SOURCE) | $(TARGET_DIR)
+	cd $(ARCHIVE); \
+		curl --remote-name --time-cond $(CA-BUNDLE_SOURCE) $(CA-BUNDLE_URL)
+	install -D -m 0644 $(ARCHIVE)/$(CA-BUNDLE_SOURCE) $(TARGET_DIR)/$(CA-BUNDLE_DIR)/$(CA-BUNDLE)
 	$(TOUCH)