Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Tatsächlich sehr schlecht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683150346

Proof data

Record hash (SHA-256)

09f80675da5c539f3e7ce00bd25a2b508b633a98fd7ce3028fda27e708740dbc

Signature (Ed25519, base64)

zvJHguaTXqq18Gim2RyHPfMqO+jrpHTBr2VjRk2+vjJfCf8bX6Si7y2l35gP0j7WPkVu4PT5DFr5H1gB5vwRAQ==

Merkle root

ed1b76d4f3111cb6e235a9fe679fe4fe63795d3193935a8c023245679c12c88c

Merkle path

["09f545dc3575d0537f8b435ac25ba86752021f483292392918b44e9dd5798489","238e3ccf71c9ee4a6f42ca0c237d9165b64adaffbf8c1039538e5f1107a920ac","f046c5d6419e8271efb8c355a59b91d5d6c356da099256f39850ce3e05174fdc","24d87942a8f7de327d4ab5ba71083d8e5a92f9a4093bf4f966c48f9fa1e970de","7f561840427b42e7a5c76444f5ec42cf801c0599f97c734d1731fe2ea80e4174","9be72a0d317c337c559a33052c58961c09350610c4f476e4b73a4040349f4eba","a2c845fbbdee05cd77bf80165f51d751e25e41529622e5fbcc3ddef9863fcd9a","96b741ac8b9e7197ca4ff76624b695af78a78adb3ae6165defc50aef6391cfbc","05727d6d6043c88769229725f40b6a0cc249132405272e77c28e466dbeb5c42b","7fc98e60f2f1edd6be50c8d17ab7157386dbe103a73a0905d91b86cc4942e964","5e25f3136e0995e72b34626d71668ed85ff88cd0dffbe887e9a6fc42a6b7edb4","07f7d14c8e1cf61f4c1da21e46a47631e1db47dd71d22b170f100a5bf052a4dc","d95f737cdc8d09dffb520130b23d2e91ee7119eb9a2a85d7ec6c56a05cc092d9","222137c91498adc204f412ffa9667367d79d38be98153f9b235308fff5e7e9de","6ff3db889906bd05786277e2021c1872c21f64759ecafab0fa871f6865f90ece"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683150346 · entry 108e9186e8c5677a5378…

Expected log hash

ce2f0f51099dd771a165694fb25d868068d124ce108279fd9df180f0ea90a863 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788320836912","kind":"published-quote","locale":"de","page":"product:smallpdf/compress-pdf/de","quote":"Tatsächlich sehr schlecht.","rating":1,"review_date":"2026-04-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ed1b76d4f311…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.