Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it does hav a auto renewal, so please make sure to check if that's what you want.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09f5e42136ec10561f9e2efb80f402602cdd5b18586e516f2bac4aa3bcd8277f
Signature (Ed25519, base64)
7e8YDvhHhmTlMHe7bMCiExXDO3bpXFmlxesl23C9aSFzPJOPKfZLhNdEeg+zDuEnJXTH+OmLNJwKPkHX70ioCA==
Merkle root
c0f36ee0335bf71d5c03ca59b0f191f950cfafcbca9602c3bac8b2183aa81d49
Merkle path
["09f3f40e1945ec91aad04858f639a36104619d21e6abb8126ae415ba06ba4285","2e3794ebd1a3c95f2ce933fdd2e9a8cf9b23f352bc36d326790f73573c14108e","b0168413cb2c7c938fcb63744120c5021b6ad091447a988175448e4db3ad3d58","28133f5410d3f44d13a4fd0aeea9806bb6fd0a50a29607453af151908505c79f","f3847d15c2ce92ef7d222df0b052b74b74947a78a9f6866dbdc4cd957226054c","d6c327bb391e203b65ecdc8c81a117d958dbd4a5c00e84ff9fd8411740b2c522","2d1fed0093d7dd35d9e70b43f6fa069ecb2b7092ff1d50afda82490b8c321305","be3428533f226431aefcd9e2d77e3e3e8234517085f7bea51e6ec9c67915f47a","da83fde08dca4cef6e0af4b648fd4eb72186ca378f669aad09615e7670ca2f63","c55f1032a06733c14d9312180ea7aa8c9d3186558d84c0e94fccb23a379cbbe1","be5b621904c3c26c98d16d2cbb89bcb78a3e53c55fc14229bd5b5b77f1f59015","927de500e960266e9b12c9524aa43fa0bea81f1fe70a1fb15680bad0fd81e947","b51875ca42ff32753b93a043ad0f198e3e1ef2fe1aedf16283da4cd1b4b1d542"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3666413656 · entry 108e9186e8c5677a8e86…
Expected log hash
0d2952e2a04951edee30f820ff095b505511cde698e520c69b8bd5fc03c1eb96 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793701189085","kind":"published-quote","locale":"en","page":"brand:proton","quote":"it does hav a auto renewal, so please make sure to check if that's what you want.","rating":4,"review_date":"2026-07-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c0f36ee0335b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.