Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great VPN with pretty fast servers.”
Google Play · 5/5 · 2026-08-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2495053720

Proof data

Record hash (SHA-256): 077f5f1dc18c22fdb3128cdd2d07886e8e928049da276f3b96e814effa5d8924
Signature (Ed25519, base64): jkg72WJak3av28LnKhQ3VicExF/+Y2tEbSg+86pKZXtEbmcyWbDl4yQDNSVp/AQlHsZuqUok0tFNeENMF7jABQ==
Merkle root: 2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793
Merkle path: ["07736e5097994b99c024b8ceb5b9dbcebf409d59d5df01552fa80c3df7127227","7a771799e42866068ddd4751e811b60a30af4a9fd11ffcd813b9b3cf93a69f1c","660a07b2b2e1e458eb974f0146aceca1d6f36cfed9fa9e7eae2bac6d48e84b66","d59b6e0058f0183276ef0cceb398fe0fec16047ed8cca221b827f76d7a409081","84485ee2635dd2c830ea2d9bad88b3b76ed0742c45a0e047bb3d5693d3a149e8","38f40a3f89fc9ae654ef877258702d06f2c1a4d3ba27c4084b02bc76cf7b49cc","bbbb1b6de05f484f186357befefad3d5383dbcb82dc102bc4859ecdd52117eb4","f1a371ee25be8f0323808e8b914344ed9fd82de482984e66fa261b26233ba62c","23d7b838499101415cdc3b0c282e02f188400a6ea2443300b03f3ce313ac5a9f","3c6f10598997f385b89ad055ce6cf9b74f48837da626c642b612de1757edd918","1e1f6ba619b1544efb0747e2169ab53922a5281865f68995f7878c379ef53500","f0962a80e376ef1e1bf660a30ac3bb4813af6840972a309db83ba70aa69dc16b","ba76741958cd5d10023d06fae1854e87ca4f7796e3b348ef0ce4e28fcbedb31f","050f107cdb1609dc86518317886321e69049b34a0448f95e4f79cacf68b9e781","01b2a2b6a3360163596fb2e0a65565dfe0e65177610b2a84b39de142f1dcaafd"]
Anchored: 2026-08-17
Public log entry: search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…
Expected log hash: ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786933230052","kind":"published-quote","locale":"en","page":"product:proton/proton-vpn/en","quote":"Great VPN with pretty fast servers.","rating":5,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.