Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Et c'est gratuit.”
Google Play · 5/5 · 2026-02-20

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2579644936

Proof data

Record hash (SHA-256): 0c9600778dd5e447b34348e94c7cc4839570fbb307d8046d576f6a5e8a5f06ff
Signature (Ed25519, base64): m6KwP3HojX6qrbDmXIOQQ+65UeWwo762xy4NZO3wVbW09Y7wdf4hreIzfWMoIct+hkkr7/98FrCRd/hZKjPiCQ==
Merkle root: c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c
Merkle path: ["0c9839a3b5cd7e0cf90b3d80a16d513d0cd252895aaf6adfe9916658ff5047f4","2fe0ab5212bd392f916b90c3832a30d274fcfc41b51152a090263f87456dbefe","af15c4dd7c81978c38ae0f6c946f06d9a8b44c87ddb145324642bd3887122fce","70a8e36981fb2fb30532016de1457357978cf05e76e93890858e26f7a9a8ccb5","cd8a7a68dbe376d7f1c5adc13ea90f6d88ce66bef60f7980733638fdc552d1c7","3f90a1a79552c09530b28dfd45f39f090f998f1c42b8e8fba5cfd97c942af4d7","35ed5a2fad1afd6cfc56b403b77ffd416bea2ce5e01b7a0ac8c2c0717ec79732","45b782a4d5910420ccaf07f2ff595e2472f04c1a4e74db1c19bd212c7a85c606","cdd33f44be705514b0469098d42e284706c2f7b5ff752a4468bfa2b9309340b5","2a7e564e3d64c1a38d6c09eed05c4a8a4f6db7ddb92369bb03617b7045665b45","10dfc38d92cb808570efd8b4da55b7412af5c5f73b2e89fc3d852f79952a14e1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]
Anchored: 2026-08-24
Public log entry: search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…
Expected log hash: 3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787545182186","kind":"published-quote","locale":"fr","page":"brand:meteomatics","quote":"Et c'est gratuit.","rating":5,"review_date":"2026-02-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.