Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“this is always the best VPN”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0a8563acc56c8d69d0f6b85aa1bb295c93dfebea9a751508a7a389491b862aa2
Signature (Ed25519, base64)
q3i0OujkFElhkFq9KVmA2bG659tomWydHp6wk2Ge5LS+IgYA7ZMLNhyJU27nMG/0FKnMlIs7l+/+DmTJIpYCDA==
Merkle root
6a443ec8eed9d782158d739b7e41ec6a701af29f823a7ab1de64875ee7b0c951
Merkle path
["0a8568d0426712d3aaaa8d5aacd15bd3f7c1768fbf6b7e8799254ff680450f39","7dfd7537dd426e6cb2451d4fd05d56c2c7a12217588b569dcf39a798a59e2ee6","2e05aa03ff5510ec97dea19aca13c172833d4f8ec56cfb6c660f394b5537e3fd","f3f083e6cabf03367ad33c4ed1cb1c1565176ed31df64040131849851d951da3","48f132c7b7e9e66b3fdcaad1f0c670462038c066690a4eb466805947b6effec7","fa05a3bada4b9df150b69c7c2b242de7e9a5e9e96123ec4b9ba814479811c02f","9c382fd27d2e8b587e3bf52bf4c2d812840717a72a1b0d9352985672d0089dac","c629ad0a496c49a5a65b24d02aeb42f138886ad8b6433b58ab721834f30c1cd2","bee4a98b25652e0ce199e91decaa278e5e6084b673465a7cda49d848782cdc63","27e78ac7c6b4b64e4d9d13df20f3468209d1b882b42f24ba4541dbf65f786824","abeb46582dd9183864b3575d13d3e83115ca946f44d8c9057217c5c1081b2392","d1428aa021f92df023950d5f7db3ea57b9cafac4dd436d734f3a48bb3b809bb6","29476cbfe7722f8e2598a733d0ac1fbdb48eb18b1f5c573ba269ee97e9a0fc53","b0ed18eb18040acb126fb105dfa9a6793027076086da4abb61b60f692c09e709","453a3492a63413cfc9df7cd796916e7949d5f2ade376044ee3eeebceed9d4360"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582566803 · entry 108e9186e8c5677ae2e5…
Expected log hash
f4f63b54e78de54106e8bd57b374f79ad9ebb7e6cc5e587c172fcadc2d1a0c5b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787556373580","kind":"published-quote","locale":"en","page":"product:proton/proton-vpn/en","quote":"this is always the best VPN","rating":5,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6a443ec8eed9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.