Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“very good alternative to Gmail”
Google Play · 5/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2871093963

Proof data

Record hash (SHA-256): 1114a5ac7851e656866722e7f8215fe761771d377047404ab121c56980597b2a
Signature (Ed25519, base64): IQeyHgv7duaTTp6rPERlUlt7g7BT6ZdZjRaOyY6Dh0bWGrf359KzHLpjM+uv1lV1JZVqi2CHKR7uqgunjlVSAQ==
Merkle root: 10c793aeb45e0f89b9202290e8cd37afdaa93db762a28319e14e5d167b3b381e
Merkle path: ["111593f0f68387626f93f296f0a4bb0e80d53be74e9166dfe48cde811e28335c","9ff02904ac3a6f538baace4569581558184d75cf79c8c1c5b4a068e4a0ff95e4","7d3bd61c386e38d1d821713bc06b437328c1445cddbc995c0fc447c6ad286cb9","7297fda81b2ced0808a58e4c9130aa833cead1eccedca056ce8ddfa21c35f0d4","180429fdb4b03d1149a07484ad3bcac58eb348f142e59203206d3643ae01be60","2db49fd5ac6876b2cfe42463f5df898cb78c61819a27cf74b812b6a143acecaf","0d181a23c5cdc18c9c73bc6b4c68d5154a52bb54c2070b6a31e03e4d10b15207","2f3bc16f674f66fb075f7f0d5afa0ee8bb2fb2f94b33e63a3ef00a0ee590bfaa","71190f1eeb785265fbc9b01b0cbee5ed03d726aae980af8603ba1fc4d379246c","b845b1765f0e4bf55cf143a33c1c30de1f7bcebca86894ee15dc761ebbf75110","1aba3ca8595d42a951c9d4a61eb63aaaf30c2ee27c4b7e18cfa0ba04a0b615df","68e985c51622498c4262b6de05994f33143579e20c921ab9191a44c84b470cd4","0c6ff78d9a5bc48641d52eb32f3b328fc570098ea056714475cd5898d1d647f5","d4f621f60f75eda733b8341a621a17886ef25c603b2427ef52f7ad4e3a8ea7d6","86698da34df4e83c54914359e9a6440fbcb5c84f13163aaa7ad9fba21ade0277"]
Anchored: 2026-09-17
Public log entry: search.sigstore.dev, log index 2871093963 · entry 108e9186e8c5677aaa83…
Expected log hash: 2dc7fe816b6373997045fe2c089e9db0b321b7c653bfed462fbdb27b856b80a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789531532649","kind":"published-quote","locale":"en","page":"product:infomaniak/mail-service/en","quote":"very good alternative to Gmail","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (10c793aeb45e…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.