Certificate Details

Subdomain atyaf
Email info@atyaf.co
Issuer Let's Encrypt
Type Wildcard SSL
Issued 2026-02-08 11:50:39
Expires 2026-05-09 11:52:07 63 days left

Downloads

API Access Token — used for MikroTik auto-renewal & direct certificate download

5260c533ce946ef254bcb724a0cda60c5b43680377b17881777940d950f24854

Direct download: /api/cert/atyaf/fullchain?token=YOUR_TOKEN

MikroTik Commands

1 Install Required
$ /tool fetch url="https://captives.net/api/install/atyaf?token=5260c533ce946ef254bcb724a0cda60c5b43680377b17881777940d950f24854" dst-path=captives-install.rsc mode=https; /import file-name=captives-install.rsc; :delay 2s; /file remove captives-install.rsc

Run install first — the commands below require it.

2 Check Status
$ /system script run captives-ssl-check-atyaf
3 Renew Certificate Smart
$ /system script run captives-ssl-renew-atyaf
4 Force Renew Bypass
$ /tool fetch url="https://captives.net/api/script/renew/atyaf?token=5260c533ce946ef254bcb724a0cda60c5b43680377b17881777940d950f24854&force=1" dst-path=captives-renew.rsc mode=https; /import file-name=captives-renew.rsc; :delay 2s; /file remove captives-renew.rsc
5 Remove All Danger
$ /system script run captives-ssl-remove-atyaf

Account Settings

Update your email, router IP, hotspot profile, and other settings. You will need to verify your identity via email.

Edit Settings

Installation Guide

Method 1 — Automatic (Recommended)

  1. Download the Install Script (.rsc) above
  2. Open MikroTik WinBox → Terminal (or SSH)
  3. Copy the entire script contents
  4. Paste into Terminal and press Enter
  5. Wait ~10 seconds — everything is automatic!

The script automatically downloads the certificate from this server, imports it, configures DNS, and assigns it to Hotspot, WWW-SSL, and API-SSL.


Method 2 — Manual Upload

If your router cannot reach the internet:

  1. Download Certificate Bundle (.zip) above
  2. Upload the .pem and .key files via WinBox → Files
  3. In Terminal, run:
    /certificate import file-name="captives-atyaf.pem" passphrase=""
    /certificate import file-name="captives-atyaf.key" passphrase=""
  4. Follow the manual commands at the bottom of the .rsc script for DNS and services

Verify Installation

  • System → Certificates → captives-atyaf (flag KT)
  • IP → DNS → Static → atyaf.captives.net
  • IP → Hotspot → Profile → SSL certificate assigned
  • Browser → https://atyaf.captives.net → green lock

Download the Status Check Script above to verify from the router terminal.

Certificate Features

  • Automatic MikroTik installation via /tool/fetch
  • Smart auto-renewal (checks every 7 days)
  • Configures Hotspot, WWW-SSL & API-SSL
  • RouterOS 6.x and 7.x compatible
  • Safe to re-run (old certs removed automatically)
  • Embedded fallback for offline routers