Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“es gibt keine Werbung die nervt”
Google Play · 5/5 · 2026-08-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2657817117

Proof data

Record hash (SHA-256): 0a23ecf1e404bf2e6f29d9c3116dedfd365e790fa757f2a1c328881a58b9798f
Signature (Ed25519, base64): mNg/Sias//n8neZ9SKhTslSqhjejd/+b6cqp5Mn78xmJvNaNRrI4VUPX0ZagjYt62xw58TTKJmrLw/4lY1llBw==
Merkle root: 7c31845ea005068c52611e47ff2778bff3790bf9c71538767447b45fe79322da
Merkle path: ["0a26ef52bd7bb79ca94fbb8f9e6439985d163640f1e9c0b8c88f4e263c0bde58","04bae6e911fe65d9d6cc83e7beb78be39824ea940b15c1e492d479bf328f64c7","dc175b52a14dfe9593f00ec3f6ba13348daa2d9d668bf85f4b2e6942fac8f9c6","63f35cf6903b5891f9c2a10e9a66e4ca5712e0acaf0fb7d72786eee1912a3f63","81a09595c0623e8e860fc17ddc5903819721c0ebc6e3ad75d2dd494a199c5518","7e2fd72919e5dae3752ba2df4f858ac1dae029f67a762b23e194f4496c1fa4f8","b3397cefdb0b4807dbda3c6cbb7cde42de0b0f7655fccb36956636dc2b57b386","313cd9a325f4a4c8e0e320a57d88244c64e251610b8676044ca0db43a205ab55","4be92aa2412dea7b04e3d2f43664273027a86a4d69dcc48046a9c988763c0db3","112798e60cbe649360bf0e691d77f14be3e25c5d9e456f9b064d266ef78976e9","d725721ef4e46a74ffa33a5b3eaf5461c6d90eaf7c1f1f95e9c66dcb49eb98e3","6ceae28d9d9991c7f0978d9583675f513d5a8b980f19419645347989922bda23","de406c010b9d09d7f74176c9d423f8d72b745ac400e2c0cfcdb434d0af8fcade","e49018058753e3439518d8ba4c827c0b343729e39fb424281e6808f61fcc629a","4f862010adf0fcb97b6b2b8112f782a485805bae9f9783a7b39739616b9b62e0"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2657817117 · entry 108e9186e8c5677ad3ca…
Expected log hash: 0666b5f97f085fdfc4cedfba58ac7e76857cdc9faa5a1032ef597cdb93024c5a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788148095319","kind":"published-quote","locale":"de","page":"product:meteomatics/weather-api/de","quote":"es gibt keine Werbung die nervt","rating":5,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7c31845ea005…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.