Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Identifikation geht nicht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2483496382

Proof data

Record hash (SHA-256)

10ca7cbefbcfddeda0e50b625fca122fc590c4febcdbd7fcf6b7a513c4e47f31

Signature (Ed25519, base64)

QC9moPdRcmdRYDq1suz/KbkMFOM3D/hARmynb/rCDloxdF84u8vSWMTvl7KoLauG41mL5e5tpEb7c5PTRUMyDw==

Merkle root

8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339

Merkle path

["10cf620b02fd91198da108c4cf8302fe1f27c8891c9805bb33f0e74793a4fc29","806999cbbe419a7c5e611587b3141338c7b41d20043fd9ee8a7c9f9612a78b27","b66e9193aaf4b5835e7f3c1fdfd60d1ca00abcd3896bcc02aeb9f7a9ee9f3915","d90bb434290efb2c9f579c910eda1c0884603524b341c61347008d0743757617","92ec3dc9867327cdf1e92b8d757e548110dcd747d9e6079c54c11e5ff1bc9b77","2333e697feacc3d31790a26d70cc1dcd4ac61f1e6d239b74e3b8d247a0cbb654","524655d324f58311fd0d2fd83bf4694a4cddd2299da021b21ba91732b2441596","d0d06f9d49e3b16f10061124e2406360c8a94883909583ddbc713bb505ba3f70","2184b93a4c923dfd0f97ce79baa3908fd9ae2b5c4471b822a56e35709222b6c1","46b242480c5b0bfa71118887101bf1aa3bc42af6e6fdcbcef9515516aea01e07","ddf6a614529feb1d664d5804a5e7f29b205d3e127a4ee07a4f8f2f5e172e2d74","a5f9e9776da24cf1d72732dba510c24b49ca2ec73ff090e98d3dde783aa83a64","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]

Anchored

2026-08-16

Public log entry

search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…

Expected log hash

9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786848988221","kind":"published-quote","locale":"de","page":"brand:findependent","quote":"Identifikation geht nicht.","rating":1,"review_date":"2025-05-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.