Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“und Zukunft keine Weitergabe meiner Daten mehr.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647580424

Proof data

Record hash (SHA-256)

0ea3998e3dfeeec3435a46e3cbb8081393a23bada044a65a6b7db7f15cd8e924

Signature (Ed25519, base64)

uVlFDWYMIVpIv94xuBnbs/tFvaCVQykK8p6quKiFYyPp16W4J5z8SrSD4EwlS2gLga6fZ3A5O+0k/kcKA7dzBg==

Merkle root

11cd275e1b8f31daf4151030cd5fc67eec90cc1b73d6c3abd8966dac0ea44663

Merkle path

["0ea937cefb7ea76e87bd296b2c39c22bd26b6fddf422055e0b7cc9cdce536718","fb9aabcc60fb4ace6473caa758dbe99d13328e5a062dc090f189a6c3b6005832","3fbbe886274010ba72a0dbf764f5b786e96c236cc884dfd999b111fc32c6ac41","f4173f1391b9ef2f69950415b8f4a98d7deb94a41cb648ccc05df6bf0fe89a57","98b98055ff16c8d4bcc6cb474413f17c2272cb67c0119aaef8237719524c4297","440851d2ac76637e3b4cb6257f3d138a2a3b4657c6c12f8357352c40eae014f6","979580a3b87b3876d4693e90b57bea3fe3f148379b5407db0af74ccf7400de66","e65c3d77b12509afc120f0fe4d7616c2561748c62771b5ed76d4fc5cb5cbba9d","4ba415ad0a79aa7c80aa284c925d5d01fb4c3da2b4944283adfcd96e31442fd7","e50275b50dc551670d74281af5ca62d385d86999d176fd3872b6c78918d9c06a","1195c4bb2d4e7df81076e3dd28f8afbbd0cb78d96d4424f0790cf25fd02134c7","15ef754b0ec11f0bcfb1882f47ccca6fc7a2c7ee673bd9ce3c5a3082d34781db","3012f7a2838d04f2071073f8ac34932376b18c2cc8805b9bec98ec1dc2d08a95","b9f2345d92694d25bd0490f4a3b26a3b973fef20d27569c442482b8bf63cf733","29dd516ceb1cd9fcda9711678cb72a0ee0864d72432066fb0af064f01b46c0cc"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647580424 · entry 108e9186e8c5677a331a…

Expected log hash

29924cde6f1b08ef8102d24e7b21fea7f81e6b89af990cb81e380cc325864e7d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788064620038","kind":"published-quote","locale":"de","page":"theme:infomaniak/billing/de","quote":"und Zukunft keine Weitergabe meiner Daten mehr.","rating":3,"review_date":"2026-06-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11cd275e1b8f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.