Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's a great value VPN”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1c0f6de02e88974ad3228a953f4a7237a823de7abe7a43adff04de3743cbce9f
Signature (Ed25519, base64)
eSdVSz/gv8EtpOKVnb2GPrFeOX75nu2/EmaMctEuSErtIvUooXojHNZi/Kd1by9leIuEfcFSAbFboaREigzJCQ==
Merkle root
d4c4aaf139801abe64089c6a646a11881b578559d9cb7d88d2fc9332bf4b830b
Merkle path
["1c0e77b1b011ac9b08e971904092b5c252fa85dbe57df5f1a23f8ce990020fe5","9505217dbf88d086dbb885ef7a90ea70882ae16bb91f9a529f675aa00269a162","c2a00f922ccd6ae40fcfcef21361e34976e27e85f48405048d710a5057d68f0c","d9dbac81771f2db65a25c30bd0e50d4f6d639371d23daf5f8d34f40d611f41c3","2328f8bbb96fa2e5b6d7e5b894088404959f5c076304386969f6025cb0faddc9","1715d6aab60d98733ef0481d7e193994c6c02806e9f011f6273d41cb63ca1c19","756e34f6742e0d28a6d91183dc4e8fb8f20bb098b87a25ef16d8b73a9451ec90","5e4ef0abb8b4c32b325946e1e7f35c724419ad8cd21ee8de7d39d8d68baf62c0","8c47e3d84d9a7667e9c271948d4a86f60127f65ed7fb3dd28aba42a3653d9f37","fd4e1d1b3d8a18ec04394601e82823ca96e3ddea0647804b98e1eb2e50e8ad37","795a1dcd3b9638626527cdf2a2c60af799e59ec13da8f3943179570114c62760","16839e2960004eed2bc8f0c311c50c6d24a7f3fff8e787bd6e0eed6e36c00e8e","6100b8f7cb9a0ad1a2de57d39552d426d438448f64577a5ca4cb2472f553358d","ef527f45d797e2d831211fa20aa17755e8de8cd626bcb27abeeea7640d159dbe","9b3fe954f7b51d7ce6fa763f00e1815ec4c70f892ca128b9deb83a2e107b9fb2"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683384390 · entry 108e9186e8c5677ab9ad…
Expected log hash
911a6ed7ed419f928c9567229b2f9168f943e91a3951514581f7a3ba93db232b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788324112523","kind":"published-quote","locale":"en","page":"brand:pia","quote":"It's a great value VPN","rating":5,"review_date":"2026-08-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.privateinternetaccess.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4c4aaf13980…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.