Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Danke für die gute und kostenlose App!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2445296928

Proof data

Record hash (SHA-256)

0bc818240eae9cd9db77016fb21b25eccc1b27a1dc36716b261d06eab5c6176d

Signature (Ed25519, base64)

ep6QPnLgUfNuxKjwn7iFJNyIFm3WA7B2Vd75XvYyp0hIQ5iYDO9RrIv//852rzDn+PFKM9f3qXHgORzu4xn+Dw==

Merkle root

d172a7cf956e2b148257f1904430b57957f1397e7267d8861b84c949d8e35e40

Merkle path

["0bbf7af04aa6fcdfd881e8cebc0764148345fd3aef07b5e176e683af97c3a888","b2e7e8793e6ed8bcaaf699817f3952015c62dfd88c939b3421cdedf1b4b91d1a","4fc083734bce86dd540ea23d5b6f4df470ad9c4f5d39480e8b4cbb707e5a5b76","7bdf40088a56d3846984fd1114bfbdd0a2fbcbc7aba55f861b407215f9b7d2f4","3058079712dc288156ffe37bc61175c0eecb9d08d7a9ac7941791157a9670c93","d17b05830d6e3b95eed2d03bc394a45ef3e12ba48d58854f1e09500606437992","b21906d1a3d6d70cd3bbdeb969491cffc35d969c1c2661c2b6b847331251805f","f002bdcd5b402583fb23fc82565f8c15e09a534e2eb948677548a1bc389f7d12","8ec2c2ee7dafc817eb8a5d6ab9db19ed1c65798a9162a5e3460b9303e005f44e","5f8e94eb3956812904a8e0dd0a1833c42619e50ee822e592aef0f0d056660c38","1b884db2791044311f61e64ae2dd1232246723259327fd8ccf25489189fb2cf7","94ae8e4f6adb62d3dedb0d45f6cb3bc7ee886f50c769e386c26dbcd96e444beb","ec9d22a60fb3373395242e0bee52cae203406eed591b174f096249c369d00f81","24b78eb17781ff82da235316ce22b13d8e2206e794b324b0ed78181b6c334313"]

Anchored

2026-08-13

Public log entry

search.sigstore.dev, log index 2445296928 · entry 108e9186e8c5677a0a62…

Expected log hash

c9abcace05ae14f54b0d99899537438e06fb4d27f22b95a0509613937d3e30c6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786588795034","kind":"published-quote","locale":"de","page":"theme:meteomatics/price/de","quote":"Danke für die gute und kostenlose App!","rating":5,"review_date":"2026-02-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d172a7cf956e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.