Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“kann man keine Kreditkarte mit Twint mehr nutzen”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2685518693

Proof data

Record hash (SHA-256)

06866808a9e751141ce4d5c19a1f5cd9e7ec268b40c6a9a46afa3ded963d32a7

Signature (Ed25519, base64)

yLEvIG1nuzFdn7kap5+spjb1ANSd3oT9CxZ6geFTYkMZsPb1ujEuSG9HywCGEEp9sBxTWzkbFI7WSi3M0E0uBA==

Merkle root

3750a5fdf1ed10aa252575b51301fecdfc7c400fa1cc1f2ff8335245da43610b

Merkle path

["06851e218e19c1290e58ceda8b8c0f61eaf57c325ed8fb6e04e3368bbbbadb1b","b525cff55c8bb9aa13e17dedfc157cf84cf0d271dabb02003c3d7776a9b593b8","cce42f1f58d1256208e3f93baa23638b3d806a9452aa3dc9ad6faf11cd76c42c","3bd7a1249f9722eaf2ee506d75547feb093c613351c7547dea7b2ecfcc3b6344","d4a40a4fb68abff850524f1cbfb7bb862911fea9df657ab70aa13975accc0ac4","2c478e536f86358dc02fd3830652353b9c4b0ad1f827c0890b4ef0cbfb1ab0e6","9dd0be6245a13bad720a7e97e381ad9365c87629abeaf3fec39cec233f8fd204","1af660f1315add35d66c1f48bfc7a9414813ed47c1d9444ed5fc429099bd780c","ce36c7e3c1005603e202cb260d4c5bf915721e5711b5159ac52b0158697670f4","b5eabd61564ba099b4b3f15598afcbf8481d616bb1425e398e9398d454710f4d","f5baa99fa36869163efdcd1791bd92133b531bed887ec8c649bb552359e4a97f","5e2a99e2c7e1f7f9776617569e7595cc6a8b4704e51458100450d820a11490be","97a8111d8475641d358c235a27a819fa77f45486e07258eb6230f5b4399f78f3","d3f60913f0f2261af2a1efa087a29b863f258046202db992bc2cb4f53d0bce0b","587eed16c1494c5b5ed63db0c99eac20f0d71c9f7de0d416e769324bf14ca737"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2685518693 · entry 108e9186e8c5677a840d…

Expected log hash

14b4c1422d781f8c06152e5b2b6bdb741e926e97bae5efd73712ab8c7b50b252 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788352576042","kind":"published-quote","locale":"de","page":"brand:twint","quote":"kann man keine Kreditkarte mit Twint mehr nutzen","rating":3,"review_date":"2026-08-30","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1223881844?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3750a5fdf1ed…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.