Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Je le recommande totalement, il est gratuit”
Google Play · 5/5 · 2026-08-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2621712605

Proof data

Record hash (SHA-256): 04ca2997f723de325cd2d28e84a6c18f32ae64aa13d9e8834e0ca56bff206114
Signature (Ed25519, base64): /J9qSh192tWId+0nF9iGICSauoRBUsv/xPJpT1TPxZIpFA1Mf2WUh5y55WE5TypFfq0svV08YnyPX6kLGJrYCg==
Merkle root: 25b46ff2419988f674720a0d9957bbe6130bde21af352d10a6eb7fa1bd87b90b
Merkle path: ["04c702d15ceb47358d0920e9de7e5cfc0bcf97858e920faa35aaf3ddb611efa1","9776af9326cb295d25fa23b5f291a9d391213f116a61a096a6169e314a62852c","6211a595169e112e177a0bd09d34b7fb8df6362074544610a31b2e836afe6982","65d85d3244f53a8266311fb325fd4de529122105f0d53201f990ff65c68d1cbe","7ccf296b6b8bf23c02c1318c8bbee2097529dcac168a06cfe1ab4707bf2a9f26","0c4851955f0a7b6263be64f03a2c7ac6d2f516c86694022ecc17b11d849e3a42","6b282e43c4aed4b486bccb983aa173d1f15ba2881f3bd007f823ba3d27c6bcaa","3a28c7d79806a4c1a90daa84ff0375c3b1d8210b93b9e245c5296092e8d064d6","d6b8f4ad16a228c0d634abc5cb4dd22809431ab5e106dd5c061fe30e685b955a","d1c8b56320ea84a1ef8523e653e9e24818953d50d9d80f90a0982b9f18eb5fba","baa0c9213423314c30b237e349ae1eb055a5a2a2703a8577e571b0031084fee5","a164ca95d37c66c485497740b3dd1b0f6d28a07a484c54c912e7c5e25c0c1d11","6a6f9d49462185c4ee2e85df13dc5c42a5069efd64c620310ba383253f8c37c5","5d4fccfce6f7964a21f73dab907adaf1b4bab75dc36256f7e7c2fc9e80b93292","dd8f1dac20e6d5f290eec3d4a0a2acb8f82d36d90a7d470d163b0eb872b09e9e"]
Anchored: 2026-08-28
Public log entry: search.sigstore.dev, log index 2621712605 · entry 108e9186e8c5677af8cf…
Expected log hash: e2d66cf3e23cbd8a996b6d44d305e387793b999542b5186c00c4ffbadc30715c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787891207850","kind":"published-quote","locale":"fr","page":"theme:proton/price/fr","quote":"Je le recommande totalement, il est gratuit","rating":5,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (25b46ff24199…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.