Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is ad-free and (still) absolutely free.”
Google Play · 5/5 · 2026-01-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2445200928

Proof data

Record hash (SHA-256): 0fbab2d9c77a811c3bb8c2abe29d73369dbf7736ccea46046c7c4348fdeaafa4
Signature (Ed25519, base64): 2VxYUWT3VNcX9cSr89HD2sJWb9o3jt2iCyuxe6C4fPVgVkMt8i5LCVUGZrRb8UFQCdH93OFdGqf2lBkeED8wCg==
Merkle root: 63f33b09117da0970eb8600025b5fa2d7e7e00ddcf017aa20e295a9534f00042
Merkle path: ["0fc24ba22e221d0970df57c17e48202ad48524ce03e73c2cbb7ef5846124f1ec","2f14df438e804bdda89f6cad13882b72f19bce34a6aaeaddccde3292a227a05e","1eb8c9fb3ccf43ba06a9c3c8bb999e144ae979c6f5a5155d913db664802081cc","d828c592ef147dee5dc96d9feda00f5b19f948de7cdad242dbfac509a5184ea4","273f48d5320bb3e9d60d3373a2771240898c2164491bc7e78a122bc125f43046","b32fa2f7e84c8b4f38d6b1d7db78a1659f24447b3622f06d9c47b22d47d4d9cd","74b34dd0937c4ec08d9524977bc5d9b15f94afd21d7235e3445dd5f37e1a67a6","b5ccaf6470b82948c9da3839cc0e2b3eb321e809ec4bd4a8f698285a214d31cb","8e6ac509ee43a6efdf873ba43d91b624fa865faac4ff81bfb36bfa0dc533018d","9f743c19c1652043d6a4bdc93e45b63a154bb5c9928da01e8eebd3c0c84a6bd3","f86c5dc77957a08a06daa75ee277232e0cf14b56ec5790f01009a45a2e588ea6","b6b3adaeeb5a42f3b37fe188bee74fec075a723ef0ca5c307c4aadfcb00197be","84c7bd3f19ba36f96686b62ade37cb85dd249bb20b59c7904d96e752a6d2e54b","357962a4cf9779c36cbc56c995807411440193d54042982f5073ccdce365e919"]
Anchored: 2026-08-13
Public log entry: search.sigstore.dev, log index 2445200928 · entry 108e9186e8c5677a5b73…
Expected log hash: 8439a0923dbb2157239c901d672e66161871ae6604887ba3dbf2459629039cd4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786588346842","kind":"published-quote","locale":"en","page":"theme:meteomatics/price/en","quote":"The app is ad-free and (still) absolutely free.","rating":5,"review_date":"2026-01-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (63f33b09117d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.