Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“mit android, Windows und Linux”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
123af2833690ca76590406986071990937faa8a7ae4b1ee7447850cd97d0ce43
Signature (Ed25519, base64)
apNy0HBoJCV6UqKpC1VLE0GsZ7ig439BHSgp0fRvi8+S/uU61z+iLJ85mjITFETYzppAHGCnSLyPjJmtOm2vDg==
Merkle root
7b426d9a8e4778c60509753003c7b551184ce3f76e1db9b678c604656c147d81
Merkle path
["123aebb0a82cd53abfd9e69a568c1c212e91c4e8cf11f81984afed10cc598bd6","6f1a78577c8dc37a1f0bfc2109e4f433597cfe5bcc5c0bb33ad205829d8291a7","59b0ccaa1edf7ec4a737cd2234b89eeb5f126c7732e6020d842ea676752094a6","6d2f76c3f1f0488d5d7f258209a9f611111ac6267c8f634d462d4e33ffebb0ac","430bce62e990d8e8da13da63f64e121b5cdfe33375f2d5a857985a628291bcd4","40e8546c62668becce9ad2fea4e6c948505fc1dabdd020620c57f03098f8afef","6af7520c8477f3cc1d0f77a97709e8e070d452dfed38fffa6f574f4c828bfa14","4407e2a84ff6656916887fdf865d72bc00b45afe7f2612978608f0c3b933fcb7","35a74429cc9abe5e990de73482d51374e12edcd0c7c09214fb417ba7f50c40a0","bdc7fad568e6303001030496b2fec8e73e747ec9917e9f7ebe63ddc739b9840c","6017d77c12c9fb7066bfa482470458852e46e19bf72c24781b9bce1b1de98c70","e31d08beab788c5204f71c66f1aae19ccd2f41215c44b660d35802a0ef79d3d2","5d99da9744e8307e1a97e2467f68825a2078c23dcc4b995c9e783f8caa323115","9116af6fd18052ff80cfd3abad6fc438171b3496be1f90c0fc1ff476ae16bd31","6fe79142608c1fc8bf2fc6f4e46810b02dde5a2430135fbb3f3615b6e79ae38a"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621780523 · entry 108e9186e8c5677a0666…
Expected log hash
8cedab57a40119bdaca7f2b5c6cf9bb1e2c3e69dc6a6b7339d16a6592c70750e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787891923870","kind":"published-quote","locale":"de","page":"product:infomaniak/vps-cloud/de","quote":"mit android, Windows und Linux","rating":5,"review_date":"2025-10-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b426d9a8e47…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.