diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
index 8c64240c..eb0832ab 100644
--- a/mdx/common-beans.xml
+++ b/mdx/common-beans.xml
@@ -1037,6 +1037,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
+                            <!-- Error on keys vulnerable to ROCA. -->
+                            <bean p:id="ROCA" parent="ukf.X509ROCAValidator"/>
 
                             <!--
                                 Debian weak key blacklists.
diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
index 26c0166d..5325f593 100644
--- a/mdx/uk/beans.xml
+++ b/mdx/uk/beans.xml
@@ -306,6 +306,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
+                            <!-- Error on keys vulnerable to ROCA. -->
+                            <bean p:id="ROCA" parent="ukf.X509ROCAValidator"/>
 
                             <!--
                                 Debian weak key blacklists.
diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
index 288b1fb7..26e990cc 100644
--- a/mdx/uk/verbs.xml
+++ b/mdx/uk/verbs.xml
@@ -314,6 +314,8 @@
                                 p:warningBoundary="0" p:errorBoundary="2048"/>
                             <!-- Error on small RSA public exponents. -->
                             <bean parent="mda.X509RSAExponentValidator"/>
+                            <!-- Error on keys vulnerable to ROCA. -->
+                            <bean p:id="ROCA" parent="ukf.X509ROCAValidator"/>
 
                             <!--
                                 Debian weak key blacklists.
diff --git a/tools/ukf-mda/ukf-mda-0.9.5.jar b/tools/ukf-mda/ukf-mda-0.9.6.jar
similarity index 75%
rename from tools/ukf-mda/ukf-mda-0.9.5.jar
rename to tools/ukf-mda/ukf-mda-0.9.6.jar
index de2941e6..1a6bc23d 100644
Binary files a/tools/ukf-mda/ukf-mda-0.9.5.jar and b/tools/ukf-mda/ukf-mda-0.9.6.jar differ