Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“ne téléchargez jamais cette application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
04fa40b6d198b6943f4ed15b19f687395ae14ccc2fac0f974a27d4600f5b2330
Signature (Ed25519, base64)
0W0czC6vWIJ9UYtgQwMxq5jkBukAQF/cuIID50PRHRHGMTKfSl5VA/6zgfjK6zVPgRxU0naj7uZ+NLkSQ8s2DQ==
Merkle root
e42defaa0a17e226699ea4a82dc9c6dd27c28085170ffe1d62d8c6a4c9215db9
Merkle path
["04f8957c555185a88b117418474fc004d8bea217fb32ade3cedfdd69f7ec778f","0066d48e9efa261a56691c0ce82916aac9c915e0d04dbeec5d215341347ad6b9","4b09e92ef9d7dff9024b2eed5339ab005493ab30472d9477add4c5e2514d7a43","281bb03a06ace66bf23df8287a725bb466b1d881aa3686aa20c98b18ad06d1e5","c36efd541052fc7ab602b7cbbc4f41c0e6b8a869813fd83bfe562c8cd276a86f","80cbe81f649396095a6d37cce2f40ed9a93d18d2a2f475b8848a748c649d1cbd","49a6755c236b7ecee8197d7138e57253dca3cef8fb8eec416fef3ea756208bd2","a43373ae6e31348b6189a8cbb58dcf382bffeec53609fd52324109e1037068d1","29825387e59fcebcdaafe8c7360823e68775cbb94e4023c9df17556115cc5170","b9923ae3179e60619b8167e25a31df7e0d747a3571bd761c66a6604ecbdccf6d","39dea0caf015701cb503eb4e94059087d030d6df7160f0d8c08dd9cc53b44240","26322ecba042f86a8a3948f32fb985f61482003505576f985a5eec2ec4c81858","a723e3192c73ed0856ed765177b67dd95561b4a0d6d1c0b16f64f339be4f05a1","f9b10a6aa616ed717dd3cacc1714fe509709e95281fdde9fabb8c6943e906d5b","270a8fe791f18cfa20f43263c29329704ffea666703469cea18570c7ca1219e3"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680856520 · entry 108e9186e8c5677adb25…
Expected log hash
356153ffa6072187539ea75dc6dfb23d03b74238aa8aa70cd6aa9a6a99e983d4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788298923475","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"ne téléchargez jamais cette application","rating":1,"review_date":"2025-11-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e42defaa0a17…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.