Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die App lässt sich seit mehreren Wochen nicht mehr öffnen”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3123541116

Proof data

Record hash (SHA-256)

0d96376876571991f006eed49ec65b54f64bd5d920f610d355c6af53e869876b

Signature (Ed25519, base64)

b16ZOZPRf/eTpwpl9VzvY54kfcWKz4q7v1swRH1banAhgG8LdFTjEqkimDxAZYO3uXizpE0AIwvHZ85ewskTCQ==

Merkle root

6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326

Merkle path

["0d9592c91683f23170532b96689a317fb06728c3a09ec94ee478541a557846ac","22bfeaf38720170e358669d4fb0384d58ffb9aaf56ddc1fbc4ecd59b278b2447","18998a6a9e76d417905d604704b64972a2548acb2b01d4a9fbd6992e5581151c","ec841e652b3b3455ed04a3db20b3fcdd83abc9afc8fc6bcd228a0ed2e53b87ee","e874bfa8f2c7e473ecba8d9c5346fc0a260000365c755b3d2f29ea2ebe557290","3fbb08457b932e6ede0e513f26cfde613c34f45cd1fa64f7ad6cd1757946b71e","98567bba2c55d81b91d193a24cf1f438b782683ad8a06f156b8ebaa91d37fb59","3c2f2d80486c79ee6042738fa0c1d1f03bdd95e489bcdc37b97dc087e5f5648b","bc82076fa9db43a08123168c4dc99cc726e615ea32a970aa178cbabb4dbe192a","0d4796417d975bbc68b4678780afa5702126566e758030e7f790db378d4acb95","293d792faaf7fddff74c4a3972f1dd3567ce3be07fc2c2bb199c0b9da6332c7e","0340a42a5e25cd0704eb9328dd33a8fa705358ba4e6282fca503520e639e9bd8","b020a374bd80d8439db67dcb5e0231bd34e95b9d3bb63efee9b4e85b2e6039f7","4c2172f51b2eef852eb0ea0a1d4f8bb29ddcd3a6f382677ca6a66af43412dce2","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…

Expected log hash

9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791346951310","kind":"published-quote","locale":"de","page":"brand:relai","quote":"Die App lässt sich seit mehreren Wochen nicht mehr öffnen","rating":1,"review_date":"2025-06-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.