Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Le téléchargement n'en vaut pas la peine.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3083528439

Proof data

Record hash (SHA-256)

08527e44cdbfb3b8aa4cf9115181db2ae462b472872e45b4837b66bf806e5daf

Signature (Ed25519, base64)

vjHnrcRZ4FNt9abpHDqVYxHI9zJh+L0lYdMtXOVvS5EKvK8eeKYk8pIH1G9iWqV+BO4u85izJuZfXDchf2/gBg==

Merkle root

3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323

Merkle path

["084c861ad4be44c26197b22c322e4ec8a7ae223937133b2c7ab518cf3dff13fc","d911d741c24ce9ce26e151c5f388d84ce013a49fb0ab9780c3c561f21c085aa7","28e1ca0f339d370ef2e95f887fa65b366c34d5cdaaff6af50430c1e796d8ff2f","aa5f3801cd0dfe6b8a47f4753ef509440cd513d64c888b9bf6b00bb9a2040190","81a52358289167d1c2f0416ca647a0611fb7c464334d3968fe6e2da56299d046","3919463203c6a97c41c5e827353871c729720ef4e4dc89a5d72f2714cca715b7","fb16afd88036df6dd85f798b6fa739a132683bfb820f1ad115716d3fe90ede23","9fe3fbfee4bd0dcaab8f0a32db8b07404b2d9682ba222e59ce3f4d161fd27625","d60a8b0caf7225b8582957353a74b50b029e0e0a3366edecd9ab79ef4b873f32","23bbc85ec137fde894332b90a07ee43b17507a3294b4346ddb0419acfd68f466","2144278dea3feb0a0c2af4686e80975f61d4f6a916eb80acb2d7e80874ef2bd9","49c2aaf051bfd8ff9dc885c9580c423af27db3a516a4f9769abbe2df74785aa9","309aeea49736ed841c0769a3c166809b978b8ad00b17b13cc0a57509820a4b01","900a8ed1297dc836a8b3be52e4e74bbac6319948157ba123cef010c147d9cd86","b933f107006d8bf043be83ef3bd88a04368b06893809d6915935ad1f675c78b6"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…

Expected log hash

8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791181418024","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"Le téléchargement n'en vaut pas la peine.","rating":1,"review_date":"2025-06-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.