Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Prime never works”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0e41f02b417b219cccb5bcd2e65f21205b03a37d50cd971faa9b0b34111a9559
Signature (Ed25519, base64)
6sjBKCPipcOigSnJJWJv1O+jsW9iB3gCiERe5Mb903SDDw5a++uMNh/PQVJZdWOzUc7/IGhkJRjTY++VJh9VDQ==
Merkle root
1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56
Merkle path
["0e487411dfcd8986261c59015dcbbd3ddd692c21acdbf1963185a863f400cec6","ccd5b34e3efb19ab35186a4a0a2a39c93594e35fda978f0d4f3ec6ae8a1d8fa1","4f082e1757a3452818ef42ef3afaa270a85ae19b10f8ad40c377e1a25321831c","a335076740516eb1fd95c4dab8dfc2caeaa3553d1ebb2196930e48b60865babc","843346c0e892e9f90efca8a61dbf111e80206a54c2ab9e43c0c7c5afe386cd2a","8c68a9698d012ea5effc2801bb8be03c7cde112fec22ab9e7be05229f1b1cf58","cdbf056acc0feb16f1c4414647762a83a521a82fb65b92e3a1bee65e9eb61aef","d8d8797f2eb7a1db42b6676c43aa87b73178c33a77b00ba48fa41d1db025f9f1","d8a044650011bcc48143d7c37255ee23ab2664e2c1a6a9622c15af719567b095","71c055f36440b8bddf14630168e6e74207f3cf580b7938cc56a94c438a2f6cf7","04aa849b4520797fcf995c39b1d89cb59e40fde751bb15dcdf28a28b657641c2","e87d3f640108f36247b0815e0b898eeec6b0102410dfc0c66c6f5f34b114e4e9","9bb9face21b64dc4548596d6f0fe4cf67321749c83227ee93ed882f3aa170652","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…
Expected log hash
eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788322016973","kind":"published-quote","locale":"en","page":"subtheme:proton/quality/vpn-speed-servers/en","quote":"Prime never works","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.