Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been using it very regularly for several years”
Google Play · 5/5 · 2026-05-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2670724217

Proof data

Record hash (SHA-256): 0d6a613b2f8159f51c8c01c4c1825c55d6d7f7b91434eec81352d33caf4142a5
Signature (Ed25519, base64): c4Fxi9sM1VVgG2tBRdp7OAiZRgM3W7PvTRrsTAlyOUeLBJ6f00pS+xl13WNaYaVsL9RNczMnS8LR4IMdZyPZDQ==
Merkle root: d1a08bffaccb4bd5530121134500726bddd8b9ce14544f30c175069340e2f6d1
Merkle path: ["0d6b557a934a9306f801b611128fc03cc897f425f73622dd4b08451619546d7e","296ba889d14311229b7424c56755b0bdf3a537915d16830535e1a553ce248de1","a0ef9cd39e75a1ff183cdbea78c664e51e380c0d448c304a9afde08722ca29e2","9b7c3860933a6ce74df83123714e6deae2aebe11c54655a1bc97a47fbcb4deb3","428e956918e6b4b167e00603a8671f376bc1dfad9b5953e05a4f7ec5c7bcb3b4","f6d318fefcf0e894c20e7cc8beeb73ee9f847d18a8389103c1bf1a1832b30a78","dc5ec154d727bfba9c783f9f3fb41585ec0a7c1d50c021874dd82ae9b7a5a70e","61ddd581f62a3cb1ea26878c6bb0546fa645bdf6aaccdbce2b2ec6d990101566","907676cd8af39ab2054f6ce543a677685bc276261ce81778eb11af129347ca8a","1bc3cda8412119a2a91cc227a863081ceec8db75ba48342031a5d20fd5a4f4fe","63f5a04cba41fbdd46bc301d0cc3f890aaafd8e71e2c45e12f4f3cc5b65ad827","422708f79a43a06560c2c80c58a4791f51a0b5498182b85809a9ac791b982ec6","25b83424b4327f2e26a2b3a1a83c1014ab2556207095e3d1112c414a2906928c","784b674df69e59ae8daa59037ba258b386fc987e1baae63fb09b14c7d0c016b8","09bcfd9352291a4c3cc61839df0884138937d69497778283c8e6e0793ca45e03"]
Anchored: 2026-09-01
Public log entry: search.sigstore.dev, log index 2670724217 · entry 108e9186e8c5677a8322…
Expected log hash: db226267e29a9b0d4e7d26b93b25b0493252e02586281022df7cbce6abd08871 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788230131663","kind":"published-quote","locale":"en","page":"theme:infomaniak/durability/en","quote":"I have been using it very regularly for several years","rating":5,"review_date":"2026-05-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d1a08bffaccb…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.