diff --git a/README.md b/README.md
index 977c01fc..6ac286df 100644
--- a/README.md
+++ b/README.md
@@ -31,7 +31,7 @@ The directories contain the following files:
 ### Install
 
 ```
-go get github.com/flynn/go-tuf/cmd/tuf
+go get github.com/theupdateframework/go-tuf/cmd/tuf
 ```
 
 ### Commands
@@ -506,6 +506,6 @@ TODO
 
 ## Client
 
-For the client package, see https://godoc.org/github.com/flynn/go-tuf/client.
+For the client package, see https://godoc.org/github.com/theupdateframework/go-tuf/client.
 
-For the client CLI, see https://github.com/flynn/go-tuf/tree/master/cmd/tuf-client.
+For the client CLI, see https://github.com/theupdateframework/go-tuf/tree/master/cmd/tuf-client.
diff --git a/client/client.go b/client/client.go
index f046b6a0..1949d448 100644
--- a/client/client.go
+++ b/client/client.go
@@ -7,9 +7,9 @@ import (
 	"io"
 	"io/ioutil"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/util"
-	"github.com/flynn/go-tuf/verify"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/util"
+	"github.com/theupdateframework/go-tuf/verify"
 )
 
 const (
diff --git a/client/client_test.go b/client/client_test.go
index 75e40a13..db188c44 100644
--- a/client/client_test.go
+++ b/client/client_test.go
@@ -11,10 +11,10 @@ import (
 	"testing"
 	"time"
 
-	tuf "github.com/flynn/go-tuf"
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/util"
-	"github.com/flynn/go-tuf/verify"
+	tuf "github.com/theupdateframework/go-tuf"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/util"
+	"github.com/theupdateframework/go-tuf/verify"
 	. "gopkg.in/check.v1"
 )
 
diff --git a/client/errors.go b/client/errors.go
index e2cd56c9..e9997f57 100644
--- a/client/errors.go
+++ b/client/errors.go
@@ -4,7 +4,7 @@ import (
 	"errors"
 	"fmt"
 
-	"github.com/flynn/go-tuf/verify"
+	"github.com/theupdateframework/go-tuf/verify"
 )
 
 var (
diff --git a/client/interop_test.go b/client/interop_test.go
index 13f0d8c5..712ca5fe 100644
--- a/client/interop_test.go
+++ b/client/interop_test.go
@@ -10,11 +10,11 @@ import (
 	"os"
 	"path/filepath"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/util"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/util"
 	. "gopkg.in/check.v1"
 
-	goTufGenerator "github.com/flynn/go-tuf/client/testdata/go-tuf/generator"
+	goTufGenerator "github.com/theupdateframework/go-tuf/client/testdata/go-tuf/generator"
 )
 
 type InteropSuite struct{}
diff --git a/client/leveldbstore/leveldbstore.go b/client/leveldbstore/leveldbstore.go
index f38509d3..9ccddc41 100644
--- a/client/leveldbstore/leveldbstore.go
+++ b/client/leveldbstore/leveldbstore.go
@@ -6,7 +6,7 @@ import (
 	"github.com/syndtr/goleveldb/leveldb"
 	"github.com/syndtr/goleveldb/leveldb/storage"
 
-	tuf_client "github.com/flynn/go-tuf/client"
+	tuf_client "github.com/theupdateframework/go-tuf/client"
 )
 
 func FileLocalStore(path string) (tuf_client.LocalStore, error) {
diff --git a/client/python_interop/python_interop_test.go b/client/python_interop/python_interop_test.go
index c5657777..9235785f 100644
--- a/client/python_interop/python_interop_test.go
+++ b/client/python_interop/python_interop_test.go
@@ -13,10 +13,10 @@ import (
 	"strings"
 	"testing"
 
-	tuf "github.com/flynn/go-tuf"
-	client "github.com/flynn/go-tuf/client"
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/util"
+	tuf "github.com/theupdateframework/go-tuf"
+	client "github.com/theupdateframework/go-tuf/client"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/util"
 	"golang.org/x/crypto/ed25519"
 	. "gopkg.in/check.v1"
 )
diff --git a/client/testdata/go-tuf-transition-M3/generate.go b/client/testdata/go-tuf-transition-M3/generate.go
index 35562a52..43a1f2f5 100644
--- a/client/testdata/go-tuf-transition-M3/generate.go
+++ b/client/testdata/go-tuf-transition-M3/generate.go
@@ -10,8 +10,8 @@ import (
 	"path/filepath"
 	"time"
 
-	tuf "github.com/flynn/go-tuf"
-	"github.com/flynn/go-tuf/sign"
+	tuf "github.com/theupdateframework/go-tuf"
+	"github.com/theupdateframework/go-tuf/sign"
 )
 
 var expirationDate = time.Date(2100, time.January, 1, 0, 0, 0, 0, time.UTC)
diff --git a/client/testdata/go-tuf-transition-M4/generate.go b/client/testdata/go-tuf-transition-M4/generate.go
index 35562a52..43a1f2f5 100644
--- a/client/testdata/go-tuf-transition-M4/generate.go
+++ b/client/testdata/go-tuf-transition-M4/generate.go
@@ -10,8 +10,8 @@ import (
 	"path/filepath"
 	"time"
 
-	tuf "github.com/flynn/go-tuf"
-	"github.com/flynn/go-tuf/sign"
+	tuf "github.com/theupdateframework/go-tuf"
+	"github.com/theupdateframework/go-tuf/sign"
 )
 
 var expirationDate = time.Date(2100, time.January, 1, 0, 0, 0, 0, time.UTC)
diff --git a/client/testdata/go-tuf/generate.go b/client/testdata/go-tuf/generate.go
index a30e69ad..51629bd3 100644
--- a/client/testdata/go-tuf/generate.go
+++ b/client/testdata/go-tuf/generate.go
@@ -5,7 +5,7 @@ import (
 	"os"
 	"path/filepath"
 
-	"github.com/flynn/go-tuf/client/testdata/go-tuf/generator"
+	"github.com/theupdateframework/go-tuf/client/testdata/go-tuf/generator"
 )
 
 func main() {
diff --git a/client/testdata/go-tuf/generator/generator.go b/client/testdata/go-tuf/generator/generator.go
index 68bcec3a..a1a616ee 100644
--- a/client/testdata/go-tuf/generator/generator.go
+++ b/client/testdata/go-tuf/generator/generator.go
@@ -10,8 +10,8 @@ import (
 	"path/filepath"
 	"time"
 
-	tuf "github.com/flynn/go-tuf"
-	"github.com/flynn/go-tuf/sign"
+	tuf "github.com/theupdateframework/go-tuf"
+	"github.com/theupdateframework/go-tuf/sign"
 )
 
 var expirationDate = time.Date(2100, time.January, 1, 0, 0, 0, 0, time.UTC)
diff --git a/client/testdata/tools/gen-keys.go b/client/testdata/tools/gen-keys.go
index a144f29e..5602d055 100644
--- a/client/testdata/tools/gen-keys.go
+++ b/client/testdata/tools/gen-keys.go
@@ -10,7 +10,7 @@ import (
 	"io/ioutil"
 	"time"
 
-	sign "github.com/flynn/go-tuf/sign"
+	sign "github.com/theupdateframework/go-tuf/sign"
 )
 
 var expirationDate = time.Date(2100, time.January, 1, 0, 0, 0, 0, time.UTC)
diff --git a/cmd/tuf-client/README.md b/cmd/tuf-client/README.md
index 0bafb6a3..1fe80385 100644
--- a/cmd/tuf-client/README.md
+++ b/cmd/tuf-client/README.md
@@ -3,7 +3,7 @@
 ## Install
 
 ```
-go get github.com/flynn/go-tuf/cmd/tuf-client
+go get github.com/theupdateframework/go-tuf/cmd/tuf-client
 ```
 
 ## Usage
diff --git a/cmd/tuf-client/get.go b/cmd/tuf-client/get.go
index ce57c81b..b73c7524 100644
--- a/cmd/tuf-client/get.go
+++ b/cmd/tuf-client/get.go
@@ -6,8 +6,8 @@ import (
 	"os"
 
 	"github.com/flynn/go-docopt"
-	tuf "github.com/flynn/go-tuf/client"
-	"github.com/flynn/go-tuf/util"
+	tuf "github.com/theupdateframework/go-tuf/client"
+	"github.com/theupdateframework/go-tuf/util"
 )
 
 func init() {
diff --git a/cmd/tuf-client/init.go b/cmd/tuf-client/init.go
index ae188d7d..2ff70f90 100644
--- a/cmd/tuf-client/init.go
+++ b/cmd/tuf-client/init.go
@@ -6,8 +6,8 @@ import (
 	"os"
 
 	"github.com/flynn/go-docopt"
-	tuf "github.com/flynn/go-tuf/client"
-	"github.com/flynn/go-tuf/data"
+	tuf "github.com/theupdateframework/go-tuf/client"
+	"github.com/theupdateframework/go-tuf/data"
 )
 
 func init() {
diff --git a/cmd/tuf-client/list.go b/cmd/tuf-client/list.go
index 64cb9473..a3cca66e 100644
--- a/cmd/tuf-client/list.go
+++ b/cmd/tuf-client/list.go
@@ -7,7 +7,7 @@ import (
 
 	"github.com/dustin/go-humanize"
 	"github.com/flynn/go-docopt"
-	tuf "github.com/flynn/go-tuf/client"
+	tuf "github.com/theupdateframework/go-tuf/client"
 )
 
 func init() {
diff --git a/cmd/tuf-client/main.go b/cmd/tuf-client/main.go
index 724468ed..15d03fad 100644
--- a/cmd/tuf-client/main.go
+++ b/cmd/tuf-client/main.go
@@ -5,8 +5,8 @@ import (
 	"log"
 
 	docopt "github.com/flynn/go-docopt"
-	tuf "github.com/flynn/go-tuf/client"
-	tuf_leveldbstore "github.com/flynn/go-tuf/client/leveldbstore"
+	tuf "github.com/theupdateframework/go-tuf/client"
+	tuf_leveldbstore "github.com/theupdateframework/go-tuf/client/leveldbstore"
 )
 
 func main() {
diff --git a/cmd/tuf/add.go b/cmd/tuf/add.go
index c982191e..c957b3c3 100644
--- a/cmd/tuf/add.go
+++ b/cmd/tuf/add.go
@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/clean.go b/cmd/tuf/clean.go
index 78561988..0705f348 100644
--- a/cmd/tuf/clean.go
+++ b/cmd/tuf/clean.go
@@ -5,7 +5,7 @@ import (
 	"os"
 
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/commit.go b/cmd/tuf/commit.go
index 764d432c..0bff3b28 100644
--- a/cmd/tuf/commit.go
+++ b/cmd/tuf/commit.go
@@ -2,7 +2,7 @@ package main
 
 import (
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/gen_key.go b/cmd/tuf/gen_key.go
index 8d674c86..cb3ea125 100644
--- a/cmd/tuf/gen_key.go
+++ b/cmd/tuf/gen_key.go
@@ -4,7 +4,7 @@ import (
 	"fmt"
 
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/init.go b/cmd/tuf/init.go
index af328acc..7c785494 100644
--- a/cmd/tuf/init.go
+++ b/cmd/tuf/init.go
@@ -2,7 +2,7 @@ package main
 
 import (
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/main.go b/cmd/tuf/main.go
index 9bc62056..b79a3fd8 100644
--- a/cmd/tuf/main.go
+++ b/cmd/tuf/main.go
@@ -12,8 +12,8 @@ import (
 	"time"
 
 	docopt "github.com/flynn/go-docopt"
-	tuf "github.com/flynn/go-tuf"
-	"github.com/flynn/go-tuf/util"
+	tuf "github.com/theupdateframework/go-tuf"
+	"github.com/theupdateframework/go-tuf/util"
 	"golang.org/x/crypto/ssh/terminal"
 )
 
@@ -127,8 +127,6 @@ func getPassphrase(role string, confirm bool) ([]byte, error) {
 		return []byte(pass), nil
 	}
 
-	stdin := bufio.NewReader(os.Stdin)
-
 	fmt.Printf("Enter %s keys passphrase: ", role)
 	passphrase, err := terminal.ReadPassword(int(syscall.Stdin))
 	fmt.Println()
diff --git a/cmd/tuf/regenerate.go b/cmd/tuf/regenerate.go
index 70d5ec1d..ceabb8a5 100644
--- a/cmd/tuf/regenerate.go
+++ b/cmd/tuf/regenerate.go
@@ -4,7 +4,7 @@ import (
 	"log"
 
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/remove.go b/cmd/tuf/remove.go
index 2871cfd1..a69dfb5b 100644
--- a/cmd/tuf/remove.go
+++ b/cmd/tuf/remove.go
@@ -4,7 +4,7 @@ import (
 	"errors"
 
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/revoke_key.go b/cmd/tuf/revoke_key.go
index e243a702..31e41a0f 100644
--- a/cmd/tuf/revoke_key.go
+++ b/cmd/tuf/revoke_key.go
@@ -2,7 +2,7 @@ package main
 
 import (
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/root_keys.go b/cmd/tuf/root_keys.go
index ec6a59ff..77ab5dc2 100644
--- a/cmd/tuf/root_keys.go
+++ b/cmd/tuf/root_keys.go
@@ -5,7 +5,7 @@ import (
 	"os"
 
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/sign.go b/cmd/tuf/sign.go
index bcd9d0c4..81abccb0 100644
--- a/cmd/tuf/sign.go
+++ b/cmd/tuf/sign.go
@@ -2,7 +2,7 @@ package main
 
 import (
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/snapshot.go b/cmd/tuf/snapshot.go
index ba88c317..c443419d 100644
--- a/cmd/tuf/snapshot.go
+++ b/cmd/tuf/snapshot.go
@@ -2,7 +2,7 @@ package main
 
 import (
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/cmd/tuf/timestamp.go b/cmd/tuf/timestamp.go
index 581a6b19..1cd1667b 100644
--- a/cmd/tuf/timestamp.go
+++ b/cmd/tuf/timestamp.go
@@ -2,7 +2,7 @@ package main
 
 import (
 	"github.com/flynn/go-docopt"
-	"github.com/flynn/go-tuf"
+	"github.com/theupdateframework/go-tuf"
 )
 
 func init() {
diff --git a/go.mod b/go.mod
index 87869e0c..a3539921 100644
--- a/go.mod
+++ b/go.mod
@@ -1,9 +1,13 @@
-module github.com/flynn/go-tuf
+module github.com/theupdateframework/go-tuf
 
-go 1.12
+go 1.14
 
 require (
+	github.com/dustin/go-humanize v1.0.0
 	github.com/flynn/go-docopt v0.0.0-20140912013429-f6dd2ebbb31e
+	github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e // indirect
+	github.com/syndtr/goleveldb v1.0.0
 	github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613
 	golang.org/x/crypto v0.0.0-20190424203555-c05e17bb3b2d
+	gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f
 )
diff --git a/go.sum b/go.sum
index cffe1eea..9a22576e 100644
--- a/go.sum
+++ b/go.sum
@@ -1,12 +1,38 @@
+github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=
+github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/flynn/go-docopt v0.0.0-20140912013429-f6dd2ebbb31e h1:Ss/B3/5wWRh8+emnK0++g5zQzwDTi30W10pKxKc4JXI=
 github.com/flynn/go-docopt v0.0.0-20140912013429-f6dd2ebbb31e/go.mod h1:HyVoz1Mz5Co8TFO8EupIdlcpwShBmY98dkT2xeHkvEI=
+github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db h1:woRePGFeVFfLKN/pOkfl+p/TAqKOfFu+7KPlMVpok/w=
+github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
+github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWbfPhv4DMiApHyliiK5xCTNVSPiaAs=
+github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
+github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
+github.com/onsi/gomega v1.4.3/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
+github.com/syndtr/goleveldb v1.0.0 h1:fBdIW9lB4Iz0n9khmH8w27SJ3QEJ7+IgjPEwGSZiFdE=
+github.com/syndtr/goleveldb v1.0.0/go.mod h1:ZVVdQEZoIme9iO1Ch2Jdy24qqXrMMOU6lpPAyBWyWuQ=
 github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613 h1:iGnD/q9160NWqKZZ5vY4p0dMiYMRknzctfSkqA4nBDw=
 github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613/go.mod h1:g6AnIpDSYMcphz193otpSIzN+11Rs+AAIIC6rm1enug=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190424203555-c05e17bb3b2d h1:adrbvkTDn9rGnXg2IJDKozEpXXLZN89pdIA+Syt4/u0=
 golang.org/x/crypto v0.0.0-20190424203555-c05e17bb3b2d/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d h1:+R4KGOnez64A81RvjARKc4UT5/tI9ujCIVX+P5KiHuI=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
+gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
+gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
diff --git a/local_store.go b/local_store.go
index 65b21831..f16c9da1 100644
--- a/local_store.go
+++ b/local_store.go
@@ -9,10 +9,10 @@ import (
 	"path/filepath"
 	"strings"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/encrypted"
-	"github.com/flynn/go-tuf/sign"
-	"github.com/flynn/go-tuf/util"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/encrypted"
+	"github.com/theupdateframework/go-tuf/sign"
+	"github.com/theupdateframework/go-tuf/util"
 )
 
 func MemoryStore(meta map[string]json.RawMessage, files map[string][]byte) LocalStore {
diff --git a/repo.go b/repo.go
index 1a192ee6..d4cf4a62 100644
--- a/repo.go
+++ b/repo.go
@@ -9,11 +9,11 @@ import (
 	"strings"
 	"time"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/sign"
-	"github.com/flynn/go-tuf/util"
-	"github.com/flynn/go-tuf/verify"
-	"github.com/tent/canonical-json-go"
+	cjson "github.com/tent/canonical-json-go"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/sign"
+	"github.com/theupdateframework/go-tuf/util"
+	"github.com/theupdateframework/go-tuf/verify"
 )
 
 type CompressionType uint8
diff --git a/repo_test.go b/repo_test.go
index 3e9a051c..e8571eb1 100644
--- a/repo_test.go
+++ b/repo_test.go
@@ -10,11 +10,11 @@ import (
 	"testing"
 	"time"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/encrypted"
-	"github.com/flynn/go-tuf/sign"
-	"github.com/flynn/go-tuf/util"
-	"github.com/flynn/go-tuf/verify"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/encrypted"
+	"github.com/theupdateframework/go-tuf/sign"
+	"github.com/theupdateframework/go-tuf/util"
+	"github.com/theupdateframework/go-tuf/verify"
 	"golang.org/x/crypto/ed25519"
 	. "gopkg.in/check.v1"
 )
diff --git a/sign/keys.go b/sign/keys.go
index 78e0b5ed..5afa126e 100644
--- a/sign/keys.go
+++ b/sign/keys.go
@@ -4,7 +4,7 @@ import (
 	"crypto/rand"
 	"sync"
 
-	"github.com/flynn/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/data"
 	"golang.org/x/crypto/ed25519"
 )
 
diff --git a/sign/sign.go b/sign/sign.go
index 09872f40..eebc466e 100644
--- a/sign/sign.go
+++ b/sign/sign.go
@@ -4,8 +4,8 @@ import (
 	"crypto"
 	"crypto/rand"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/tent/canonical-json-go"
+	cjson "github.com/tent/canonical-json-go"
+	"github.com/theupdateframework/go-tuf/data"
 )
 
 type Signer interface {
diff --git a/util/util.go b/util/util.go
index 4644c3b4..751c677e 100644
--- a/util/util.go
+++ b/util/util.go
@@ -17,7 +17,7 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/flynn/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/data"
 )
 
 type ErrWrongLength struct {
diff --git a/util/util_test.go b/util/util_test.go
index 54eaac37..e59a31f7 100644
--- a/util/util_test.go
+++ b/util/util_test.go
@@ -5,7 +5,7 @@ import (
 	"encoding/hex"
 	"testing"
 
-	"github.com/flynn/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/data"
 	. "gopkg.in/check.v1"
 )
 
diff --git a/verify/db.go b/verify/db.go
index 6170cfbb..8bc80a3c 100644
--- a/verify/db.go
+++ b/verify/db.go
@@ -1,7 +1,7 @@
 package verify
 
 import (
-	"github.com/flynn/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/data"
 )
 
 type Role struct {
diff --git a/verify/verifiers.go b/verify/verifiers.go
index 1473cabe..8a80aa27 100644
--- a/verify/verifiers.go
+++ b/verify/verifiers.go
@@ -7,7 +7,7 @@ import (
 	"encoding/asn1"
 	"math/big"
 
-	"github.com/flynn/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/data"
 	"golang.org/x/crypto/ed25519"
 )
 
diff --git a/verify/verify.go b/verify/verify.go
index efba08aa..eb618ae0 100644
--- a/verify/verify.go
+++ b/verify/verify.go
@@ -5,8 +5,8 @@ import (
 	"strings"
 	"time"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/tent/canonical-json-go"
+	cjson "github.com/tent/canonical-json-go"
+	"github.com/theupdateframework/go-tuf/data"
 )
 
 type signedMeta struct {
diff --git a/verify/verify_test.go b/verify/verify_test.go
index ed4c0ae4..50776e8d 100644
--- a/verify/verify_test.go
+++ b/verify/verify_test.go
@@ -10,8 +10,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/flynn/go-tuf/data"
-	"github.com/flynn/go-tuf/sign"
+	"github.com/theupdateframework/go-tuf/data"
+	"github.com/theupdateframework/go-tuf/sign"
 	"golang.org/x/crypto/ed25519"
 
 	. "gopkg.in/check.v1"