Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bei Gratis-Nutzung nur deutsche Server”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0dbb0dc2792a71d2039022857424a1aa319e8028f8b1da0dc6f63427b8e645df
Signature (Ed25519, base64)
0mRdEoHFFrPcfEVbA6cB/NM+4+LTKvwQc5SWzGs1ZMYOcdIItuymavNfVg/un5p+e2COZaybsW5mWSHHVIe0DQ==
Merkle root
aca24c2e1601b5dc9b1de981d06ce87bed5d41ddbec5f662f2e9122f8356acee
Merkle path
["0dbda69a1586fc6a0a16a2ceab99d628dcc7229659102f4b1bad059ab434bd31","9df0318f338ae4848629c0347746ca5523431e090f13f1524f453ba19e9221fd","94f20958edec4f31ccc1026230a527a4f44bc9d603ff6d95933870204c799082","fd66b5340d2d8c96303fab7bc3f75b0f6417d17059dc8c9ff9cc4102bde1441f","e9aa1da1e0235a7cdbcab41dab259942fdf99ca95253cb217edcfd81c5991585","95e904f8ffbfe198165bdb3efd62a32ab15a95d3b29c19be8f5f70fa81624585","edf9f9613abec9e3df94b2c07bcced32f0246cb6b349412f59203d94c7f7dbdc","fad1757ab9fa4d206400ad7a4ae89282df6004a6fefb432ca93d252b048722e5","71a9ef6fef272f89e8754f70b36fcb3a4638096f427e4ebc5bae37529ab56de0","c703a771abc97e2e26d8d57dee2985e8a37b497076f01712eecff4d6fce38c48","8457a61df2521ed1c7091546fc3d96958709d083af2703085d04b878da497b2f","221e344af956d762abd7b0528fea0351c300f305366fa8cf52a4d031332c4b68","785cb8b0d18f0c340ebc5c45aa65a8c1aeb80c6372971eb84765b151025affd0","0e83767fcbdd35a48bae255d39cf62414f789337f2dcd7cabfb48132d2f08768","1a3b232790d06ca4fb8d5411790822aec44d7b1a2760faf9da0d58899fb5e5ea"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2656945634 · entry 108e9186e8c5677a6226…
Expected log hash
d8cd67f34eaf3c783d457778db7013b72c2283a4f271c4135e4b5609ebb2de25 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788141623173","kind":"published-quote","locale":"de","page":"subtheme:proton/service/serverstandorte-verfuegbarkeit/de","quote":"Bei Gratis-Nutzung nur deutsche Server","rating":2,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aca24c2e1601…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.