Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich bin definitiv gespannt, wie die kostenpflichtige Version aussieht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2681318538

Proof data

Record hash (SHA-256)

07b1ba54b37d1921a2bd22904623316cfa271855c5a95308a042d20038769414

Signature (Ed25519, base64)

9b64xye2E51Y1coEGX8oSpqWh7qgQXaSx0ok5HKRpxxKNxsi4DSYskuzFwsZLhJPIA4/PoSYGcvn1RkWeThbBQ==

Merkle root

80545feed588a969110bcd2c8e526c8c2e400cad7348c7872c323a1674d2355a

Merkle path

["07b1f4aac30c61299277e0a328d8d923b19b97fcaebc2c81ae32b8613e924fc6","a10328cd1ae658bd2e9b8aa0566109739f7f05e234a285e202b65a5129b19926","35f3f2530861c02f07ec3c2614c0955311d566835a050e761bab94f435c7f59a","be0e6fd1ca65280ce1ffc2a201d208ebe9c9d3399058a78558913e251b5e7f62","35cc6c248adfe34537f90487f02bec11522dc1b22dcc6e7c7a75bf7d1b31111b","3632595eaf1d6cfa10d33d1db36a66472f240871e48ce6b00ceba174df0a3fa1","bd22c69368ba3042278cdd9d46dc69d62f01e29764015c213c8a5efc88950914","e7389424c14a0cdf59ce5ea3cd9c29cd49a91c06cfba0653be377f22e183a7b4","49e4afff9f22023316c0c986d77dd9d490d8ce89e4692bd907562d15c5bb8653","e56085001975f3a6f907c5086df8319f97e2bd06a4834c0e63a38daf3da97668","b79e21263f593cde011e300a3ed53cf16be958a63ebbaa6590901198f98bec16","0ca1719d1668d120a6fce323cc79e9d42ad7abb5c9a5dac5c512164c0396f635","cf85b24fc1eda5aee2e6660fb94d01e1afb915d56f864de60a3987cc95b2cea1","8378d9d6ade0d6214a847a4a8145a9f89a0810e29d8d29962807c9aaac17e271","fca9ab6e6247b2eeb89a8619f295121cacecd7391ef0e06251791813430b969a"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2681318538 · entry 108e9186e8c5677a4bab…

Expected log hash

663cb0c78a61cc964eb6f0e00407fec6844129fb0623d2ac072b7b2e4274054b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788302168109","kind":"published-quote","locale":"de","page":"theme:proton/price/de","quote":"Ich bin definitiv gespannt, wie die kostenpflichtige Version aussieht.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80545feed588…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.