Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very accurate app”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2495053720

Proof data

Record hash (SHA-256)

0d016bb78e957f6a1f0591f14318053d96d579e89656b0b644104c66124eff6d

Signature (Ed25519, base64)

SztgKdZLuRLv3UXj1YzJCd8Oc359hB9C6ErTjS9H7UweDzQ87aS4WXwBpzR0ALzgri40sQvG7syVqDFxyJPYAQ==

Merkle root

2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793

Merkle path

["0d007a94bb4d00add40ea3a97cbe9f2660b8806c1cc9dfc4f1c954c84be4aeed","400e242f18561078f495ecb8864a9c5cae1b3a3895c417623e7862884b0ffecf","de032650cdf9b5cd95027018bd3ba34c9291a3210dce6e69e9f72644bf65f86a","d116f222d77f3b6464039c2ed8582836e9ff8cbfb71b9e76a553ff2f276939f2","1574f643fda0340a5d1ef37659fb911d4714979669b6d2ce8ecd133816515de3","5dd29b9ec8245f265cb5c9f61525d5214b5aa8d9a730c863f2af23d98018237b","2f0b895045340a5387a10ddd82f794b00ce2d53da2d0bbf3715fb31a769919c9","204869a09e64c6d5e88f2cc38cfa0bd9d06064e4bae8cb09c7770a4b8322f997","77ceaeed4578aeb2bbc27fc24d162755f9c27c9cc6da5585dda150f4f9758057","3c6f10598997f385b89ad055ce6cf9b74f48837da626c642b612de1757edd918","1e1f6ba619b1544efb0747e2169ab53922a5281865f68995f7878c379ef53500","f0962a80e376ef1e1bf660a30ac3bb4813af6840972a309db83ba70aa69dc16b","ba76741958cd5d10023d06fae1854e87ca4f7796e3b348ef0ce4e28fcbedb31f","050f107cdb1609dc86518317886321e69049b34a0448f95e4f79cacf68b9e781","01b2a2b6a3360163596fb2e0a65565dfe0e65177610b2a84b39de142f1dcaafd"]

Anchored

2026-08-17

Public log entry

search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…

Expected log hash

ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786933230052","kind":"published-quote","locale":"en","page":"subtheme:meteomatics/quality/forecast-accuracy/en","quote":"Very accurate app","rating":5,"review_date":"2026-07-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.