Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nach dem letzten Update lassen sich Links in E-Mails nicht mehr öffnen.”
Google Play · 1/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2513934798

Proof data

Record hash (SHA-256): 08403946bda8c5a8b32e177f627a86eb75870039c885790763a4b9661c85b84f
Signature (Ed25519, base64): b0Ktc/SSI2WH5X1lPnOUqAry/uGAcTc+uFtv99kPpu7PaQtu7AdLU0ciQjXXts+WhVCbHGGsspD3L8YHhBuZAg==
Merkle root: 0148d24ff6e9c2ab4d5b200cf436fcaf811faf144951e67c277e5df63df916ac
Merkle path: ["083bd2cdd923b8aad08543f1882f8db04f35e935c030fe6bf10dd9ed576d81c0","01ab0b5a0f5d6a91c3e6c703196d1984f60330ebe05c2e180f79aed14291c22d","ad760cc30abb39cb05060f17065304e819de0bc0f8f82a1741fcf89d67375f89","e6823ece2f537e6b145545f39f864837223792355467276adbc53918d4e2ed92","9853a9068a4be0cbbe25fd191284d44a00d7a0c9addfce0770e57b095e21eac9","1333ab18382ddce36fe62edeb52d50a94e0b7177d385e2eb068c9b80dbfdb082","e8160a3174d5488c89651f907ec53f13d525d7458e02743595d5710ff2f1c754","5fe11a013d6d128cd867d6234d0323dfcadf9173c626551cfce0ab5217382a31","a1252995d72b4cedaafee91076bb355b34ec6e8bcc2f683c6ed3d1dc4c5bdce4","76d8cbbb15a4aff5955372402a49edd7c48a1454005e691e882750c0e0ae38df","6dc7fd456ed8124d17bd8afe8e572b091925a5840161148448d98d8131b88582","050026360cc30428b0f9f7d3fe48810eb38e0be82fe3bdc5ddd1aeca489736ad","6e682ef2f1977653a59b0ad4ee880774d1e4115b6b52f6386378633c9c3c0395","94d634e519e6d7de4794c0ce09ca16c6cca04c4fb77fe27354f6655f0f9db8fb","eefb32e3ef6dc5b176b5121ed7a7991ded7d89d0f08c50d4493143d001bfb6b2"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2513934798 · entry 108e9186e8c5677abbfa…
Expected log hash: 4398d73a28baccf419c99b11cbeb8ef2e4242701bb0cc17960e1b5f329faf480 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787122088277","kind":"published-quote","locale":"de","page":"product:proton/proton-mail/de","quote":"Nach dem letzten Update lassen sich Links in E-Mails nicht mehr öffnen.","rating":1,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonmail.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0148d24ff6e9…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.