Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“nachdem du die Abonnementgebühr nicht mehr bezahlst, erlaubt die App es nicht mehr”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579644936

Proof data

Record hash (SHA-256)

0b68f0bdd3f2d198cc57ce55c64ad6fc7d6fb0960e3c4e5bf9b0c55749688c9d

Signature (Ed25519, base64)

gviIC6uHrIY7eGyO3RjVpOYKDV4GceCOTDjsNMFypTBxgmCDg+MkkzHGTJuc9oTw6UU8mRgcyt+TU6IQatZxDQ==

Merkle root

c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c

Merkle path

["0b6809890dcebf0d5bdc714b3322cb49afe4d1ffa0ce0f4a6f3384d05dd59fc4","8d7a8ca73cb58c043e1ab1b8c8b98d4a4587904486a1da44162d765a8ebc2d43","7296aed30d08f72b6e2b9c3cc5a5f92f321e895043d72a42134f0e4b2b00a265","9bf1d7ebf5cddb1c526e2a9baa78a79a048434faa0d59267d0266e3a8c484154","b6e6bcdf5e24d867b123c641d052cd7649e93d0b001e28a96fd359624d75898b","225637ae7bb12391117d2eaee540ea2680026a0761ef6e32b5b1d1aed72bf357","bb6777fac6b73987d33a2d3f5088b03a3d118b6818213060b212e9714fca6f1f","5a52131e5bbf70876ada57696f52bc18c2224fda1eb676f1d286a83f6e5bc55d","713b811c959b9f3de58e51d075da2a323c0163c00175510c527db1fd3f4db5de","8db959110300a253de9bde5b5641adced32d1b6da358010e24eb814f3b094875","21dceb876cbe59a71a9bdd1b75264994db32860fb2d37844c2f478d1c57d32f1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…

Expected log hash

3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787545182186","kind":"published-quote","locale":"de","page":"product:smallpdf/compress-pdf/de","quote":"nachdem du die Abonnementgebühr nicht mehr bezahlst, erlaubt die App es nicht mehr","rating":1,"review_date":"2025-12-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.