Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Not expensive considering its usefulness”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2657725656

Proof data

Record hash (SHA-256): 05b1309e81502174272dc14799f59bdc7ac4d3d4be974d57c9f8f4e52ecf7590
Signature (Ed25519, base64): mkqiTIE0sU0ksd0ux7q5kj6f25GZ3j0TbI7mUXlmSQdJck1JWAYRW2d0gz5pn9nnY5ipql8ASR1+R6BSCnMcBQ==
Merkle root: d019a962265fd99700bb41421c12bf721bc431ce9725f4e9d547011775ab56ec
Merkle path: ["05b20d8040f5118df375fe000a183a2a1570de4bad25ce3afab9c54a05106141","0fcb3d14529e86046da3c26fe8fca30226696f70ce950b6ffa69eaead9c47846","a5302ea6ecb2f4fd67f6aae46376828c989d340d1742569920ea9302b8f89271","300651d46fb67cba6df30cf0aeb3edd6cfecd8c9e2db8c07ee5af6e7c5600fbc","dd081ce7e8b3bd5f36383dc95f80772565ff678df2a7712bf0a13abb8897a40e","810c40da5c64e4e56c7fffbc9718d3d0f2e37ba5b87598c19c0ada95fe0f710b","33e99bba5c032b823aaf74a8fccf7ade175fb274affe26306f9367b281a99dcc","3d5bde891426df5a0d6b8b280313830c471ab93d4799d257bddf09cdbb5ea476","a32f3bd7a08be680c3312068637c224c694688e97f0bd02b49264c6a651c75a9","919b2fa3eb600beca12650d8fbb3dafd6e0c6ae76b22e7496470406aa3b78637","4cc034251d442e8c2f32660ba00b05d7f7b553c1726d84f939c0940a5d928aec","a3af7151d6a244480abe5bc8ada397c9af55b3431df57672865c450809772fd0","8d7f9bb84a33c413af9063341c8f5160bc8725a67ef59bd2d044580fb9f3155b","65b176b4a433b701cea4a24b83deb2fa9ed09be9f26f9fdaada87e8434a57f00","a28f44db157d986c9333d9e3edce8ce71060ce7f7d8f4bff70f57fc26d48546f"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2657725656 · entry 108e9186e8c5677adf65…
Expected log hash: b4666dc064e94c6d0ca3a2e9a0c5f9ff5cb70ce3ce9e0a74343a10c712c15a62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788147462663","kind":"published-quote","locale":"en","page":"theme:proton/price/en","quote":"Not expensive considering its usefulness","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d019a962265f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.