Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Simple et digne de confiance !”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
06bd8752e3c9f1c81787f6918c0d1b804d39a07e2eb8676ab1b5d77cff868ddd
Signature (Ed25519, base64)
d+3JzN5kb54J56sXtDHsn60RjPICMvllGfyrzB/zbueaIopKoUcUSADnXauGp00/Tml9d/ApKKnk0/s3nfzhBg==
Merkle root
8d929b933d3da853a342174568dafd4f2990c556a59a904f6c4eac8eca263c18
Merkle path
["06b997410ccb6dfdafdd61daa71396c3714be5e5fa3b6dfcae2c18fed6c617ea","439fe4e4dd4d1831252be5f2938752ae1e9c73a88e24ffbb9a76f4616a309585","44a8b939d0f20007d7f32faeddc5286727b0c0147db9a8c43f46f18d03cb6e72","1cf6db54572e26b86a20346457b33010c9be791de8bd988752ba557c0e4e806a","74d7b2f92c1b5b8ec5dc726471d331832f70cc0de6e4348212f17c2dabf9e538","fb9210c8e894364fcc9c513478df6dab8821140f3c7972c3013d222b56b95443","9b842d18dba8aa683a5650ba4844f1e8d750330b1ff8cf3718b2e50baaeb10f6","3d46a86ffe37893cc56788ce08de7e5b0a0a02a580ea98e0b55804b76cab85c5","eeaa38983c971b4cd10ab521525268f86d3daedc923d5e36bde389f5d5f26bac","e7bef68f683a65dbed15a548ea64c6d25d42fccac21642b96f31909e97a1666e","3d6155f3202930725d04745c1febff035e2f8d94f9f75b77463aa71c7a3bf614","4273814e139b537ff52878f215555e1437b0cf0a363d27847ea79db5ccf13f6f","db36e5683a162968d642d2b33f1127be2dcf059690ad38add1e5db8d7a7a41ac","9576369f408a7fb58ca2e97774369b4e7458346c8937c3d02549b43f61f201e1","67cc9c31bb9e37342ca834f1c2afacca9d4e9ea3aa24cfabf98f677678d81a55"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579616312 · entry 108e9186e8c5677a98b8…
Expected log hash
169fea3926d76eeb6fbcc1ed6cb8bcc55e598869705eefd29172a719878e4a1c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787542624469","kind":"published-quote","locale":"fr","page":"brand:relai","quote":"Simple et digne de confiance !","rating":5,"review_date":"2026-07-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8d929b933d3d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.