Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Viele Verbindungsabbrüche oder Server, die nicht mehr reagieren.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2612347360

Proof data

Record hash (SHA-256)

0f8bfa2dff1257ed7477eb90787222978a8e4f4d953f1d8af29f0e05ad75957e

Signature (Ed25519, base64)

ksCcAsmqWoRRDC0PDnwLdetQUCDSRHsZXs3ahCs81uDmnVbmC3NfdoYg7M/3lNJRGbOHlSMHT0dL+WRCcUanAQ==

Merkle root

8f6189bb14c654a5d372a228199718ff564d604464d9ffcf8d8c57d2f8172964

Merkle path

["0f8e151cd6b0df1402784b92e7f85f18b44c3b5b2e13c5a72cecb528ded80739","20e907209ac7a3a7f1db7509cdeb3b8a916896c8c6cd1d123d30d39037a7c488","a862f3cdd66953d6f04c9b9756c2ff701ea125b9bd2c1b515b9530d186451dda","f9ec07ab1f0efc94707e2c32a94c90e6835d8da8eaab8aaac2fe0ec57681f177","0cd1fd811dd2c825bbd6e3dc42d38a1206aad983b15d14454d3a5ee7669af2ab","ad7b4d9df8e12145ef2e8fe3f4f6aabfc5ade270b264f20a44f1e9188c111fe6","0b1f39e1ddad17a34c779a59b2c748381d23632727733b98ba8c7e19d8e4b176","85533571ef0cd935d0383ce77f8b090b447a3848bc425929ad3e6d21b362f221","e1c2bcedb5db305969af44bdc8a457516671c73f75c2b2c0f35559943cb1be8b","2dbddf8ea2ef701465e19fe29c0e8e78bdba0e546b8bbf4b5567f2cafb2c697e","12795ac1ce805d8645457eeae5714b5fd076f6c739534197f0192494433981aa","c21a1b257beaea5e90ba876953b29208f6eaa4818a9e0b9f0f580a4232d14957","d5e5182f0f7c8fd9914bb5068e30609c7b7ba611edd3b96993f419056ad799df","ca0eb82709b8721be19953519075736e0e9884af9a0e7db695d54d1f9882c40c","32e069a2f4b0287d6e635104478f1ba230775bff6273abb1d5b04830933b2725"]

Anchored

2026-08-27

Public log entry

search.sigstore.dev, log index 2612347360 · entry 108e9186e8c5677a787f…

Expected log hash

8887b1619ee0c81e58d4da852c5197a07ff26c69d495e7acb0423596891597fd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787799389869","kind":"published-quote","locale":"de","page":"theme:proton/communication/de","quote":"Viele Verbindungsabbrüche oder Server, die nicht mehr reagieren.","rating":3,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8f6189bb14c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.