Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe VPN Plus abonniert, aber das Abo nicht erhalten.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3666413656

Proof data

Record hash (SHA-256)

04b6e29f20092e9365a6bd4fef4568c8692bea31363804f40ababdb7213be2a1

Signature (Ed25519, base64)

qqrbNuu2YEyj845lTaq3hHUJAOdg1LxA3wDgkfV6a6wLshazpFAM3N1buNnZQycr2wBlsmf+Th+W3hVG+tSLAw==

Merkle root

c0f36ee0335bf71d5c03ca59b0f191f950cfafcbca9602c3bac8b2183aa81d49

Merkle path

["0499216dd944c9984e44f617ccc71f37af3c2bf445a2858a4c1840fc472e3131","2e00a46d11f622dc4ec9acbab6d3bfa2d2b7cccde0a3d4195512376cdf939d47","a7fbd9af86b442c48ed6655f723999bf99d9a328e4b29d50d5134fd44c4e35c9","20c4b864822812a6fcdffebe2f727710c2197e140c3a8d990b1fb8a938f760de","9b5aa56d260ab2f94e01e651eeb948f83cda0b49b7c7bf7ba1834342fbc81294","2cb0d33da5a462cd6d3cb260b7717c16c107bd3a2466c3d50c2ab4e1b3a0436d","f3739f525df313156e8afc15573d586ae2436c5f01e6666e8fd7ebef8b2871e8","c1685ff01f4bc66b5936ebf0bcd5ce432a409fd5187aca9a7eaeae39900c1048","bef259e020dfd4eff28f7331b2519c2515205a07b329be58bb142a779a7b75d6","c55f1032a06733c14d9312180ea7aa8c9d3186558d84c0e94fccb23a379cbbe1","be5b621904c3c26c98d16d2cbb89bcb78a3e53c55fc14229bd5b5b77f1f59015","927de500e960266e9b12c9524aa43fa0bea81f1fe70a1fb15680bad0fd81e947","b51875ca42ff32753b93a043ad0f198e3e1ef2fe1aedf16283da4cd1b4b1d542"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3666413656 · entry 108e9186e8c5677a8e86…

Expected log hash

0d2952e2a04951edee30f820ff095b505511cde698e520c69b8bd5fc03c1eb96 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793701189085","kind":"published-quote","locale":"de","page":"brand:proton","quote":"Ich habe VPN Plus abonniert, aber das Abo nicht erhalten.","rating":1,"review_date":"2026-07-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c0f36ee0335b…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.