Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“The price is fair.”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 3668845412
Proof data
- Record hash (SHA-256)
12491f285fab51ff1278faed91b148df20553ba768d73bd2512db278889c5838- Signature (Ed25519, base64)
eM9ppQPLlstkQ3rzKgk9ZHwFJIac8CHrYfDxdd+kiS3M/c25pk8BmG5GntImfK5OM3DQygxUeU2CKukfg/IxCQ==- Merkle root
7019aaa5828f6d5097886420e36d6e6ded993bbd5a23bd9e2c5cfaa460d7110c- Merkle path
["12528aae1bb9cec9dcfde49cfb44aaaa1a4df4f701b69da996fc91bf76c1465e","7b6e0629f0d1b5d97a10e13ea789dcafc207bd77311ce6df450fdb058f239315","10d9203b68dd78ff0284db1a5ed95f7169be480f793c72cd8bc51b4712de6b03","3ec65b27496b4b7249279e8c1535a0c269eeef74e92afd875fd61da1c573e166","5636e424ec2ed7cac8ecaae82fd83f9142989ff943150f52e480fc64eddd05bf","e2de69ed67cb4f84455567c152ac1bd6f850ff6c148c523af5aeb7b4d4be5f04","1ee429172f990cf4381c6cf0bc797a336d64edd5c8de4515467080ce227fcfab","d781a15fe5d31b12307b412780573d9458792e317ff107ee604a57e7c95c5e78","d1a73383d5c310de1a7f7f520270aec31ac71b20b2ccd61fdc852fe23c28fedf","ddc114f4a901dfabc1c9c094d675341151332075e065ffdfbdaedaf2f6400a64","1672ca4b4b0916ef44a233c081428c5bb1acfd1429f1405b97a240aa08a60765","70afc385443fbd90d5057df8dcfdd810a18b6e5abb553d2b96a045cffc7ed8ec","3eab3f38cdf1b48533da9c351ed9f742051b60c6252331b34c1bc9a3d2442b17"]- Anchored
- 2026-11-03
- Public log entry
-
search.sigstore.dev, log index 3668845412 · entry
108e9186e8c5677af265… - Expected log hash
-
9f4762e1bb287ce51f4f6f20cca12e845b979e3d26d611c4c9b3dd71b059c0c6The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1793707083193","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"The price is fair.","rating":4,"review_date":"2026-06-25","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id331787573?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7019aaa5828f…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.