Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die Entwickler hören nicht zu”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09eb254ee2acaf3820ca70d138b3ca7dfe3861c8c7128a2e0c2b6ba4846b1355
Signature (Ed25519, base64)
TUvAL2l0U9tjGzQSrAdyXD9qOTa3use2gbN+9xZLeKlRLBBLMsZCc8lhQHC+0QCPm7NWgt9giD/k9Lw1oLlADg==
Merkle root
0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path
["09eb34e85816d65c14dcfcdd59fc2249dc1ec407c2b8b9f73861d7ec4edbae68","ec299c9684b672a37d7f763dc3dd9715b96f7c2cf57067e9a3baf13c2aaa3b11","f86ef28bfb13494fa9f0aa248bd3c43d78c0842e17ac6224427005296c98d0c0","24ae723f480338069cba90b3cdfdf028cdbe3be57536d9a83b40e094b19a361b","236d9767457094db9b3d50418350a2e3151d0e6ed83e0b98157bcacffd1b37d9","f5c40fe451a2ad5672e6192b59a5158b702955dd9b6605ae88fedaec32dab3f4","045f5003ef05560187bdd6936e152dc3f5e69d7c5fb4b46888a95e22487a1853","b6f87b295d121436456594c0059373e9728bdbae9e614fcc9bde83de3657aefa","1de39063e00deb999a71809534730585c4b14ed605ad802eaf94759c30a764e2","2b43c15bfd7a1d2cecdfb558bae88c7e2fc8e0a8ccce8ec2d641712d39cb0434","3ad1c1387dce6a9f8741a40084c2ec6d687e21582edb6937cb787a4525a2b787","aab51e2412790f739095eae6d28bc9b4f817dba064b561c920a4f60198d031a0","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash
ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787975494243","kind":"published-quote","locale":"de","page":"subtheme:proton/service/serverstandorte-verfuegbarkeit/de","quote":"Die Entwickler hören nicht zu","rating":1,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.