Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am not able to subscribe ProtonVPN.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ce72daed1450050b0b0e4e0a08f4ba77d7246c3606567c70970f10192af7ff6
Signature (Ed25519, base64)
Wsht+SJVI2TgYdqDgWk9eTApFatxmyI0Niz1nFeYY5oFVgen+YKTTyaklbJ/fba3V80083hh0cq9ZYZWNHrGDQ==
Merkle root
2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793
Merkle path
["0ce3516434b3e5f25c2dea76b258477a22aab6156d698e4918200c2c2288e0ad","777651c4258c9a7f4e7d726203d2672ca955bfb230fd0e2782d0ae11ada727ec","5508d5b47b2c6fa6351fec8c9ddf375097e5a953c53cb1d333feaaa6b5460e95","0fad8c2470ef45072149ea225d8c4f45066fcfc7259fa4fea97f1f023138dc74","46f64971eb55a9f5ac48a67fa2d25466fdeefaa832fe889b746aa2fbd2da0495","480d5138988bf8beb994a7250a0a904feee0e83f5c1eb226f10bbb578842871e","2f0b895045340a5387a10ddd82f794b00ce2d53da2d0bbf3715fb31a769919c9","204869a09e64c6d5e88f2cc38cfa0bd9d06064e4bae8cb09c7770a4b8322f997","77ceaeed4578aeb2bbc27fc24d162755f9c27c9cc6da5585dda150f4f9758057","3c6f10598997f385b89ad055ce6cf9b74f48837da626c642b612de1757edd918","1e1f6ba619b1544efb0747e2169ab53922a5281865f68995f7878c379ef53500","f0962a80e376ef1e1bf660a30ac3bb4813af6840972a309db83ba70aa69dc16b","ba76741958cd5d10023d06fae1854e87ca4f7796e3b348ef0ce4e28fcbedb31f","050f107cdb1609dc86518317886321e69049b34a0448f95e4f79cacf68b9e781","01b2a2b6a3360163596fb2e0a65565dfe0e65177610b2a84b39de142f1dcaafd"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…
Expected log hash
ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786933230052","kind":"published-quote","locale":"en","page":"subtheme:proton/ordering/free-plan-upgrades/en","quote":"I am not able to subscribe ProtonVPN.","rating":1,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.