unbraid 2.7

unbraid 2.7 adds profiles, saved sets of routes you can switch between, and a speed test for up to 10 routes at once. It also includes the changes from 2.6, which was not released separately. The Routes page has one add button and tidier route chips, and the release fixes server favourites, Mullvad and ExpressVPN issues and several statistics screens.

New features

• Profiles. Save up to 20 profiles on Routes, each with its own default route, app exceptions and routes. Tap a profile to look at it without using it; Use switches to it, and nothing reconnects until then. The profile in use keeps the changes you make.
• Profiles. Tap + and Profile to save your current setup, copy the profile in use or start an empty one. An empty profile needs a default route before you can use it.
• Profiles. A profile that isn't in use can be edited from Routes and Apps, and its changes stay in that profile until you use it. Remove from takes a route out of that profile only. While the setup in use goes through a Tailscale exit, another profile can only choose that same exit node.
• Profiles. Each profile lists only its own routes. Direct shows once one of its apps uses it, and you can make Direct the default from the default route's sheet.
• Profiles. Manage renames, reorders and deletes profiles. Names are up to 12 characters and must differ by more than capital letters. Deleting the profile in use leaves the current routes as they are.
• Profiles. Provider settings and other app settings are shared by every profile. Changing the location of a route that other profiles share, in the profile in use, changes it for them too.
• Profiles. While a switch applies, Routes says so. If the connection refuses the new profile, the setup that was running comes back, with Try again.
• Quick Settings. Three new tiles switch to your first three profiles and connect if needed. Tapping the one in use pauses for 15 minutes. If a profile still needs something from you, such as a default route, the tile opens the app instead.
• App. Long-press the app icon for shortcuts to your first three profiles. Each opens Routes on that profile, ready to Use. A pinned shortcut stops working while its profile isn't among the first three, and works again when it is.
• Speed test. ALL tests up to 10 routes at the same time, to see how much of a fast line several providers can use together. Each route gets its own M-Lab test server, then all download together and all upload together, for ten seconds each. The totals need at least two routes to finish, count only the time they were all running, and leave out a route that failed or changed.
• Speed test. Before a combined run, a sheet asks what needs a choice: a route whose country has no M-Lab server can use the nearest one or be left out, and a route that can't join is left out with the reason. On mobile data or metered Wi-Fi it shows the data the run may use and how many of today's tests it takes.
• Speed test. Routes without apps connect just for the run, within each provider's known connection limit, and disconnect when it ends or is cancelled. The VPN can restart for a moment before and after.
• Stats. With statistics on, History shows a combined run as one row with its routes listed under it. Each route's result is kept as its own test, marked as shared, and Tunnels keeps using tests run alone. A combined run counts as one of the 100 tests kept and is kept or removed whole.

Changes and enhancements

• Routes. One + button, bottom right, now adds everything: tap it for Route or Profile. The two add buttons beside the section titles are gone, and the list leaves room so nothing hides under the button.
• Routes. Route chips show a slash before the exit's country code, as in /NL, and every chip has the same size, so exit names line up. Settings lists routes with the same chip. A route that exits in any country shows a lightning bolt.
• Routes. The default route card shows an arrow so it reads as tappable. The address an exit reported sits under its server, and a check that didn't work reads Couldn't check this exit's address.
• Routes. With large text, route rows stack and notices put their button under the text. With a default route and no exceptions yet, the page says that all apps use the default route.
• Routes. Remove route says that its apps will use the default route, and which other profiles lose it too.
• App. Tapping the tab you are on in the bottom bar takes you back to its main page, and on the main page it scrolls to the top.
• Speed test. If an M-Lab test server refuses the download, the next server M-Lab offered takes it. Speed tests send M-Lab the app's name and version, and a combined run also sends how many routes started together. Nothing that links the routes of one run is sent.
• Privacy. Profiles are saved with your encrypted setup on this phone. The names of the first three are given to Android for the launcher shortcuts and Quick Settings tiles.
• Stats. The Journal heat map and combined speed tests do less work while you look at them, and Licences in Settings prepares its long texts before showing them.

Bug fixes

• Location picker. Server favourites now keep what is needed to connect to that server. Server favourites saved before this version are hidden until you star them again.
• Mullvad. A pinned server that Mullvad no longer lists is reported as no longer offered instead of being retried, and signing out no longer warns when the device was already removed in your Mullvad account.
• ExpressVPN. Servers without a valid IPv4 address are skipped instead of stopping the connection.
• Connections. A network loss noticed just before a pause no longer interrupts the connection after you resume. A change of routes applies even when the cache of earlier connections can't be read.
• Routes. An address check that ran out of attempts no longer leaves Checking the exit… showing.
• Apps. After you change an app's exit and close it, the list scrolls to where the app now is.
• Stats. Tunnels, App flows, Journal and Live now stay consistent when a connection ends, the period changes or live readings restart. A speed test with no country to name says No test server answered. Try again later. when no server is found.
• Settings. If saving a downloaded server list fails, the app keeps showing the list instead of closing, and the list's publication date changes only once it is saved.

Install

Download unbraid-2.7.apk below and open it on your phone. It requires Android 13 or later on a 64-bit ARM device. Install it over the GitHub version of 2.5.6 to keep your settings.

This build has no Google Play Billing or in-app tip jar. Like the Play version, it uses Google's open-source AndroidX libraries.

Android allows one active VPN app per user or profile. Before starting unbraid, turn off any other VPN app in that profile, including its Always-on VPN setting.

Check the download

Download both unbraid-2.7.apk and SHA256SUMS into the same folder. From that folder, run:

shasum -a 256 -c SHA256SUMS

The result should say unbraid-2.7.apk: OK.

The APK uses the same signing certificate as the GitHub version of 2.5.6. Its SHA-256 fingerprint is:

42:BA:8E:3D:52:1C:DE:47:B7:C3:E6:93:94:ED:97:73:91:0D:B3:C0:CD:DC:BA:28:9C:EA:5D:B4:39:09:F5:EB

unbraid 2.5.6

unbraid 2.5.6 shows the public address of each VPN route's exit, and reacts sooner when a server stops answering. A failing route is checked again within seconds and gets a minute to recover on the same server before unbraid looks for another one in the same location. It also includes the changes from 2.5.2 to 2.5.5, which were test builds and not released separately.

New features

• Routes. While Routes is open, each connected VPN route shows the public address of its exit, as Cloudflare sees it. unbraid asks after the routes connect and again when a server changes, with up to four attempts while a tunnel gets ready, and says Couldn't check this exit if none answers. It never asks for Direct routes and forgets the answers when you disconnect.

Changes and enhancements

• Connections. When a route's server stops answering, unbraid checks it again about 10 and 20 seconds later instead of waiting for its next regular check. It gives the server at least a minute to come back, then moves the route to another server of the same location. Routes with a pinned server or a Dedicated IP, imported connections and Tailscale exits stay where they are.
• Connections. To avoid false alarms, checks pause for 30 seconds after a new network, a reconnect or the phone waking from sleep. A route that was just moved isn't moved again for two minutes.
• Imports. New WireGuard imports keep the config's own PersistentKeepalive, and 0 or off turns it off. Configs without one, and connections imported before this version, still send a keepalive every 25 seconds. Import a config again to use its own setting.

Install

Download unbraid-2.5.6.apk below and open it on your phone. It requires Android 13 or later on a 64-bit ARM device. Install it over the GitHub version of 2.5.1 to keep your settings.

This build has no Google Play Billing or in-app tip jar. Like the Play version, it uses Google's open-source AndroidX libraries.

Android allows one active VPN app per user or profile. Before starting unbraid, turn off any other VPN app in that profile, including its Always-on VPN setting.

Check the download

Download both unbraid-2.5.6.apk and SHA256SUMS into the same folder. From that folder, run:

shasum -a 256 -c SHA256SUMS

The result should say unbraid-2.5.6.apk: OK.

The APK uses the same signing certificate as the GitHub version of 2.5.1. Its SHA-256 fingerprint is:

42:BA:8E:3D:52:1C:DE:47:B7:C3:E6:93:94:ED:97:73:91:0D:B3:C0:CD:DC:BA:28:9C:EA:5D:B4:39:09:F5:EB

unbraid 2.5.1

unbraid 2.5.1 adds Protection, which lets you choose a DNS filter for VPN routes and Direct apps, and reorganizes provider pages. It also includes the changes from 2.5, which was not released separately. AirVPN gains sign-in with an API key, Mullvad and IVPN gain blocking and port options, and WireGuard providers get an MTU setting. Your custom DNS server and provider blocking choices carry over.

New features

• Protection. Choose a public DNS filter that receives your lookups over HTTPS: AdGuard DNS, AdGuard DNS Family, Cloudflare 1.1.1.2, Cloudflare 1.1.1.3, NextDNS with your profile, or Quad9. Your own server accepts a DNS over HTTPS or DNS over TLS address, or an IPv4 address for unencrypted DNS.
• Protection. Choose where the filter applies. On VPN routes, the lookups unbraid handles go to the filter through each route's own tunnel, replacing its usual DNS and provider blocking. Direct traffic through unbraid covers apps that follow a Direct default route. Local network and tailnet names keep their own handling.
• Direct apps. Apps set to Direct can stay Outside unbraid, with the phone's DNS, or go Through unbraid so their lookups use the filter while their internet traffic still uses your normal connection. Choose the default in Protection, and change it for one app with Filter its lookups in Apps. Apps that pass through can see that a VPN is on. While Android's Block connections without VPN is on, every app passes through unbraid, and apps kept outside still use the phone's DNS.
• Protection. When Direct apps stay outside unbraid and the filter has a Private DNS name, Private DNS for apps outside unbraid copies that name and opens Android's settings. Once you save it there, Android's Private DNS applies to every app, and apps on VPN routes skip their routes' DNS.
• Providers. Set a provider's own blocking on its page in Settings, such as NordVPN's Threat Protection Lite, IVPN's AntiTracker, PIA's MACE or Mullvad's DNS content blocking. It sets the default for that provider's routes, and you can change it for one route in Route options.
• Providers. Providers & servers shows each provider's status as a coloured dot with words, such as Connected, Setting up your key or Can't reach its servers right now. It turns amber when a route keeps dropping, which can mean the provider is over its connection limit.
• Providers. Provider pages show Connections or Devices: what unbraid uses and, when known, what your plan allows. Tap the row to set Your plan's limit. The counts cover unbraid on this phone, except Mullvad's, which include your other devices when Mullvad reports them.
• Routes. When you assign apps, change the default route or pick a location, unbraid warns if the change would open more connections than a provider's known or entered limit, such as a second separate Proton VPN Free tunnel. When it can, it offers to share the connection already in use; you can also choose Change anyway or Cancel.
• Settings. WireGuard provider pages have MTU under Advanced settings: Default (1280) or larger values up to 1420. Larger values can be faster on Wi-Fi but can stall uploads on mobile data. Imported WireGuard connections and the home tunnel stay at 1280 or below.
• AirVPN. Sign in with an API key from the Client Area instead of pasting a config. unbraid tries to add a device of its own to your account; if AirVPN refuses, unbraid uses your only device or asks which one to use. Signing out asks AirVPN to remove only the device unbraid added, and tells you if that fails. Pasting a config still works.
• AirVPN. After an API key sign-in, the AirVPN page shows which device unbraid uses and, when AirVPN reports it, your plan. If AirVPN confirms that the device was deleted or renewed, failing routes wait for you to sign in again.
• AirVPN. Advanced settings has Port and Entry address, for networks that block AirVPN's usual port or address. Alternative is used where AirVPN's server list offers one, and Automatic tries the next port after repeated failures. AirVPN's blocking, forwarded ports and dynamic DNS link to its Client Area, where they are set.
• Mullvad. Adult content, Gambling and Social media add Mullvad's blocking of those categories to routes that use Mullvad blocking. Mullvad-owned servers only leaves out the servers Mullvad rents; servers you pinned stay.
• Mullvad. Port under Advanced settings offers Automatic and four UDP ports; Automatic tries the next port when routes keep failing. The Account row shows your paid-until date, and This phone the name Mullvad gave unbraid's device, when Mullvad supplies them.
• IVPN. Sign-in handles two-factor codes and captchas, and Scan QR code fills your Account ID from a photo or a saved picture. QR codes are read on the phone, and unbraid doesn't request camera permission: Take a photo uses your camera app, and unbraid deletes the photo after reading it.
• IVPN. Choose AntiTracker's Block list when IVPN offers several, and Hardcore mode and the WireGuard Port under Advanced settings. Automatic prefers port 2049 and tries IVPN's other ports after repeated failures.
• Proton VPN. The Proton VPN pages show the options read from your config at sign-in, such as NetShield or port forwarding, and link to where you can extend the config before it expires. Earlier sign-ins and bare keys show those options as not known.
• Server lists. The Proton VPN, Proton VPN Free and ExpressVPN pages show when their server list was published, when known. A provider in use can turn amber in Providers & servers once its list is over 60 days old.

Changes and enhancements

• Settings. Protection replaces DNS & filtering, in a group now called Safety. A custom DNS server you set before becomes Your own server, still used on VPN routes as unencrypted DNS inside each tunnel.
• Settings. Provider pages share one layout: account, the provider's settings, Used by when routes use it, Advanced settings where available, then sign-out. Settings most people never need sit under a collapsed Advanced settings row that sums up what is set.
• Settings. Provider pages and Route options name each provider's blocking the same way, such as NordVPN blocking. Providers whose blocking unbraid can't switch lead to Protection instead, except AirVPN, which opens its Client Area.
• NordVPN. Threat Protection Lite moved from DNS & filtering to the NordVPN page, where it sets the default for all NordVPN routes. Your choice is kept.
• Routes. Moving a route to another provider drops its own blocking choice, so it follows the new provider's page.
• Sign-in. When all your IVPN or Mullvad device slots are in use, sign-in says how many your plan allows, when known, and links to the provider's client area, where you can remove a device.
• IVPN. For 90 seconds after you sign in, unbraid doesn't check IVPN connections while the new key reaches IVPN's servers, and Routes can say IVPN is setting up your key. Devices uses the plan limit saved at sign-in: after changing plans, sign in again or set Your plan's limit.
• Stats. The Usage note says apps set to Direct are counted when they pass through for the Protection filter.
• Privacy. With a filter on, the lookups it covers go to the chosen service or your own server, and NextDNS requests include your profile ID. Opening the Mullvad page asks Mullvad for your paid-until date and device list, and opening the IVPN page asks IVPN for this phone's device name.
• Privacy. Filter settings, plan limits, the options read from a Proton config, and an AirVPN API key with its device's details are saved encrypted on this phone.

Install

Download unbraid-2.5.1.apk below and open it on your phone. It requires Android 13 or later on a 64-bit ARM device. Install it over the GitHub version of 2.4.9 to keep your settings.

This build has no Google Play Billing or in-app tip jar. Like the Play version, it uses Google's open-source AndroidX libraries.

Android allows one active VPN app per user or profile. Before starting unbraid, turn off any other VPN app in that profile, including its Always-on VPN setting.

Check the download

Download both unbraid-2.5.1.apk and SHA256SUMS into the same folder. From that folder, run:

shasum -a 256 -c SHA256SUMS

The result should say unbraid-2.5.1.apk: OK.

The APK uses the same signing certificate as the GitHub version of 2.4.9. Its SHA-256 fingerprint is:

42:BA:8E:3D:52:1C:DE:47:B7:C3:E6:93:94:ED:97:73:91:0D:B3:C0:CD:DC:BA:28:9C:EA:5D:B4:39:09:F5:EB

unbraid 2.4.9

A route that can't connect now blocks only its own apps, with Headscale device names, more reliable timed pauses and many privacy and connection fixes. When a provider signs you out or a route can't connect, only the apps on the affected routes lose internet, and your other routes keep running. This release also keeps more of unbraid's own lookups inside the tunnels, and fixes problems with pauses, imports, sign-in and statistics.

New features

• Headscale device names. With your own Headscale server, you can now reach devices by name under its DNS domain. Turn on Device names under that domain in Settings, Tailscale, Advanced. Your server then answers every lookup under that domain. Changing Control server turns it off again.

Changes and enhancements

• Imports. An OpenVPN config that never checks the server's identity now shows the weak security warning, with Import anyway to continue.
• Sign-in. Back clears a provider's sign-in form also while the sign-in is still running. The sign-in finishes in the background, and a failure no longer leaves an error on a form you closed.
• Sign-in. Sign-in errors hide the passwords, tokens and keys that unbraid recognises in them.
• Stats. unbraid no longer saves the peak speeds seen in normal use, which it never showed, and deletes the ones earlier versions saved.
• Connection checks. When every checked provider tunnel fails, unbraid sends one request to Google over the phone's own network, to tell whether that network reaches the internet.
• Connection checks. Routes pinned to one server and NordVPN Dedicated IP routes are checked too. unbraid never moves them to another server.
• ExpressVPN. unbraid checks ExpressVPN server addresses before it prepares a connection.

Bug fixes

• Blocked routes. Signing out of a provider, or a provider refusing your login, no longer turns the whole VPN off. That provider's routes are blocked: their apps can't reach the internet, and they don't fall back to your normal connection. Other routes keep running, and local and home access still work. Sign in again or move the apps to another route.
• Blocked routes. A route without a usable connection blocks its apps and tries again after 5 seconds, then less often, up to every 5 minutes, and at once when the phone changes networks. A signed-out or refused login waits until you sign in again. Routes says which routes are blocked and why.
• Blocked routes. After a tunnel keeps failing, unbraid checks whether Mullvad removed this phone's device or IVPN ended its session. If so, that provider's routes are blocked and Routes asks you to sign in again.
• Pinned servers. A route pinned to one IVPN, Windscribe, ExpressVPN or NordVPN server connects again after the provider changes that server's address or key. unbraid looks the server up in the provider's current list each time it connects, and uses its last copy while the provider can't be reached. A server the provider no longer lists is reported on Routes, and its apps are blocked until you pick another.
• Network problems. When every checked provider tunnel fails and the check over the phone's own network fails too, unbraid keeps your current servers and checks less often until the network works again.
• Pause. A timed pause uses an exact alarm when Android allows it. Otherwise the notification says Paused until about the time, and Routes says resumes about it, because Android may wake unbraid later while the phone sleeps.
• Pause. Changing the phone's clock no longer changes how long a timed pause lasts. A late resume alarm no longer ends a newer pause, or reconnects after you disconnect.
• Pause. Resuming after another VPN app took over while unbraid was paused now ends the pause properly. The paused notification and the timed resume go away.
• VPN behaviour. Changing Always-on VPN or Block connections without VPN in Android's settings takes effect as soon as you come back to unbraid. Direct apps keep working, and the pause notice says correctly whether apps go offline.
• Connection. Connecting right after disconnecting keeps the connection and its notification in step. When Android ends the VPN service, unbraid closes its connection engine too.
• Connection. While a provider looks up a server for a route change, you can pause, disconnect or make another change without waiting.
• Connection. A failure to save recently used server details no longer stops a connection.
• Shared connections. Two routes with the same WireGuard key on the same server share one connection when their settings match, also when one comes from a provider sign-in and the other from an imported config. When the settings differ, or a route uses the same key and server as the home tunnel, its apps are blocked with an explanation.
• Shared connections. Two routes on the same imported OpenVPN config and login, or two ExpressVPN routes that share a connection, now connect.
• Incoming connections. unbraid refuses new connections opened toward your phone through its WireGuard, OpenVPN and Tailscale tunnels. Your apps' own connections and their replies work as before.
• Domain table. After a pause or reconnect, unbraid uses the next of eight address ranges for the stand-in addresses it gives apps, and refuses the others. An address an app kept from earlier is much less likely to reach a different site.
• DNS. When an imported OpenVPN server sends no DNS settings at all and no custom DNS is set, names are looked up through Quad9 inside that tunnel instead of failing.
• DNS. Connection checks look up their test servers through the DNS of the tunnel they check, not through the phone's own network.
• Route options. With a custom DNS server set, the blocking options of Mullvad, Private Internet Access and IVPN routes show Protection off and can't be changed, as Threat Protection Lite already did for NordVPN. Your choice comes back when you clear the custom DNS.
• Tailscale. Only names under ts.net with Tailscale's own server, or under the Headscale domain you allowed, are looked up through your tailnet.
• Tailscale. Apps on a Tailscale exit reach tailscale.com and tailscale.io directly only while a sign-in is waiting. Afterwards those sites follow the exit. With Headscale, only its own server is reached directly, and only then.
• Tailscale. unbraid refuses files sent to it through Taildrop, and deletes any it received before when it starts.
• Tailscale. A Headscale server whose name starts with a digit, such as 1hs.example.com, no longer stops Tailscale exit routes from starting.
• Tailscale. Old unencrypted Tailscale sign-in state is removed only after its encrypted copy is saved. If that fails, unbraid says so and tries again.
• Tailscale. When it's off and no exit-node route uses Tailscale, Reach your tailnet reads "From apps routed through unbraid", since apps you set to Direct skip unbraid unless Block connections without VPN is on.
• Speed test. After testing another Tailscale exit node, unbraid switches Tailscale back to the node your routes use, or to no exit node if it can't find that one. This also happens when the test is cancelled or fails. A test of the routed node waits for that switch.
• Speed test. If a route's provider, place or chosen server changes during a test, the result isn't saved and the test asks you to try again.
• Local & home access. A private home subnet written with a host address, such as 192.168.1.0/16, now reaches home through the tunnel instead of the local network, and malformed entries are ignored. The same applies to a home WireGuard config's ranges.
• Local & home access. Allow Nearby devices now says what the permission does for Tailscale: reaching devices on this network directly instead of through a slower relay. It also shows this when Tailscale only runs for an exit-node route.
• Surfshark. Server addresses now come from gluetun's public server list on GitHub, so connecting doesn't look up server names through your network's DNS. unbraid keeps a copy on the phone for when GitHub can't be reached. Keys still come from Surfshark.
• Surfshark. The server list in the picker shows each server once.
• Windscribe. A config from Windscribe's Config Generator is no longer mistaken for a Static IP config when it names the location's WireGuard server.
• Imports. A WireGuard config saved with a byte-order mark at the start imports normally.
• Imports. A WireGuard config whose AllowedIPs together cover every IPv4 address, such as 0.0.0.0/1 and 128.0.0.0/1, can be an app's exit. Invalid ranges are refused, and a config that leaves out private ranges says so.
• Imports. An OpenVPN config that checks the server's name or name prefix in a certificate field other than its common name (x509-username-field) is refused with an explanation.
• Sign-in. When a provider turns a sign-in down for too many attempts, has a server problem or sends an unexpected reply, unbraid says so instead of asking you to check your connection.
• Sign-in. A config file chosen with Choose file is no longer lost when the phone rotates while the picker is open or the file is loading.
• Settings. When settings or a sign-in can't be saved, a warning stays until they are, and tapping it saves again. Unsaved changes stay in effect until unbraid restarts.
• Settings. Signing out of a provider keeps the screen responsive while the change is saved. Signing out of everything, signing out of Tailscale and changing its control server delete the connection's files only after the VPN has stopped.
• Settings. When signing out of your last connection takes unbraid back to sign-in, copies kept of settings and account files that once failed to open are removed too.
• Apps. When you come back to unbraid, Apps shows apps installed meanwhile. Apps you uninstal...

unbraid 2.4.8

unbraid 2.4.8 is the first public release, signed with the new release key that later releases also use. unbraid is a VPN client for Android that lets different apps use different VPN locations at the same time, while other apps connect directly. It works with NordVPN, Mullvad, Private Internet Access, IVPN, Proton VPN (Free included), Surfshark, ExpressVPN, Windscribe and AirVPN, and with your own WireGuard, OpenVPN and Shadowsocks servers. If you installed an earlier test build, uninstall it once before you install this one.

Before you update

From this version, APKs are signed with a new release key. This release can't update an earlier test build, because their keys differ, so uninstall the test build once before you install this one. unbraid doesn't back up its data: uninstalling deletes your saved connections and routes, and you set them up again afterwards.

Changes and enhancements

• About & support. In the GitHub build, the support row under Settings, About & support opens the donation page on unbraid.app, and the source code link points to the project's new home on GitHub.

Install

Download unbraid-2.4.8.apk below and open it on your phone. It requires Android 13 or later on a 64-bit ARM device.

This build has no Google Play Billing or in-app tip jar. Like the Play version, it uses Google's open-source AndroidX libraries.

Android allows one active VPN app per user or profile. Before starting unbraid, turn off any other VPN app in that profile, including its Always-on VPN setting.

Guides are on unbraid.app and the privacy policy is at unbraid.app/privacy. unbraid is free software under the GPL-3.0-or-later.

Check the download

Download both unbraid-2.4.8.apk and SHA256SUMS into the same folder. From that folder, run:

shasum -a 256 -c SHA256SUMS

The result should say unbraid-2.4.8.apk: OK.

The APK is signed with this certificate, and later releases use the same key. Its SHA-256 fingerprint is:

42:BA:8E:3D:52:1C:DE:47:B7:C3:E6:93:94:ED:97:73:91:0D:B3:C0:CD:DC:BA:28:9C:EA:5D:B4:39:09:F5:EB