Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“fast and hassle-free”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
090dc4323701c62d170f47306f9ed511513e660d064e84704da7f1075062c8d1
Signature (Ed25519, base64)
E9rStM7ZTkxEuNL7v/yDRd2ZpQtohBHPWeeJkk6B1eESYnhPd0IkKeMJ3tC7Oy/zYcCAUuFJXF6H7PRUX9LGBg==
Merkle root
ffe0abae83fe32534ebead9dc4840cffa734701988d7729ea2741c63ce333209
Merkle path
["090bdf26054a6d5da4fe6482d1aa9110c650b1bf844c1cb8192636d02fb1ff4f","4da99a3ce088336d116406b4e81fda3b09f1fb1333773f0877c2ab379b89e790","f41ea7f864eff2c97c866d04f023bd321c7a436d8d6b8b2e708c7761e4920f8a","d3968bfcf948a6a19ecfdfd0200ee11c881a865b88f3e8db7fd601003bd76630","8ac8bbdf7ad3c817a63400945011fcda5521ae21671b305d0cc1817514b021ea","1235dd6171c0ca6fc7016ed16ec8b67a8651bed9fc1512d865cf19c0613ce8c9","fabe7795919f8e0de37e44a3f47782a26b0b79880b042125775eaf380ce072a3","03ac53f73214dfbb7ba7206791f04c94824a422682cdc8b392a66c8edefeddee","a16ce7c21f41fb2b8cb1420db7d6fd7133830921622e46b3f42033733c6a9163","f04f83c3bfd9d7f31f743612c2c13b577a0ccb23832e0806dd149b75e53a5e0d","73a39a5e974d34bbb8ee3d4669fa32111cd84204b68681919799750207c19564","16a20cc814214b26526f21ee5f967cbf38004ddd8d0ac5579894e33963c2f40a","849ed338e3b19bfd222d070ef2b6f25f2505730ef52ebcda9291b3aef8591b7a","a104e1c95f5429ec272490e6572eeda4db6dbedfc04ee0f94200f459c1d02cf8","4742e9987316174c17377563bbb971469480b811c365b9940f38dd437d53482e"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671929919 · entry 108e9186e8c5677afaac…
Expected log hash
b7a1aa2befa5caac7007c0b2e7b21cf5f700349fb9119336f4b3c994326ff20e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788240211764","kind":"published-quote","locale":"en","page":"theme:infomaniak/delivery/en","quote":"fast and hassle-free","rating":4,"review_date":"2026-07-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffe0abae83fe…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.