Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“ab dem 1. Tag ist es bezahlt”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2421029908

Proof data

Record hash (SHA-256)

0c798f3b46faf327600f219ea7b3190706d852baa7e04e7ece7dc5385c9ca551

Signature (Ed25519, base64)

poR9FsajVI3hlZ4GROdP1v+ZivjwET+AvmtEr7E6MLe9Ei9qE9lQC8/ANSkOYrZEY3val+kQXdusdpRAok9vDg==

Merkle root

1bf8eb51a7df5f919c4fc328f08806e066fabbb1ce5f327959dc52b9112c2373

Merkle path

["0c77b8d52cfc714df000d77ece7c2b1e44c7aa010b02d180eaae8a4539ef33a2","109e905afbbe00edfb45d0eb745c1ecf8276588ed04e52f1a09ed85f7bcebbd0","9604c738c62d7b05e3311de8854e7b35065c00ec239f7165d12e32e4ce265416","1b98b5f56dfb6a69d03832f669fe077add424463f24f13ef9d46dba06dc81fa3","fe488101e202726ea90ef21f5a60506bbc4fc8b81f3f9d9d5bc541f7e77da967","ac5b73cbf842ae9c6e280a2e809ebfcfa3f4d99441fced2517cb87d867842cb5","1c5fedfe1be35d21a42321a490b34d4ac2ac073d45c3c0a3fc08359186fc8593","fbd26aa5fd777d12bae3773375051394c7ee708ea2ab6ac76b3d0ccd56afee32","95a01a87c9a307dbfdb6d45306ca7dbc96a583ceae1cd4c173b561347e608295","37d2043f23aa6a8c32b98b84151a43463b9bd9c67dd13303ad0a80288df7823b","e68c51ea58a0b20896188b05b305e106d0795cd7b3e4dba7534ac38d163cd3d4","0906ecb306a300d02bb71740363637ff59ab496cdb27b14b0634e18f8e1e0088","57b8950d3352220efc2af46075e515d53887e345441b5d29ccbf877723888dd6","94e7a19114c752516be887bb5421ddb5ef8e75f5418fb3ab72119b9e67133070"]

Anchored

2026-08-11

Public log entry

search.sigstore.dev, log index 2421029908 · entry 108e9186e8c5677a6388…

Expected log hash

f643624d33c623b514d9f61e3097e47feecd37721cd01e8d6db4ef3d1025e9a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786417221305","kind":"published-quote","locale":"de","page":"theme:smallpdf/price/de","quote":"ab dem 1. Tag ist es bezahlt","rating":1,"review_date":"2026-04-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1bf8eb51a7df…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.