Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Why do you pay much more upon automatic renewal”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
127901d9879f0f34084cf8a7443fd5ac0bc8ec31b7be9592f0cbbaa4b4ed2f17
Signature (Ed25519, base64)
MjgucsQ1CUU5iQpg0Vs+uj45n9L/r9fA14wijf80J0Xd4hOh6J2omOBKPqL0Bg33uG/RlLcU3CmRBrV/ZBmYDg==
Merkle root
47aef0bbc5d347d2f064428fd7eda9e99f7cea2d49004267bc87db0e45c42023
Merkle path
["12796b69db2d766f9b7843cb558450c0952cfcf741f3e978f573a59b205a907f","278a4abb29d471f4bf4d60c71277d9d5eedb461746d1738e2af44f765bc9c835","72b16b0bf7bab0b26c4206289d969407ec0f85ae52b7be3fdc09bfba9dcaf0fd","035cf92ddc1ad256b66dc1e7118aed099cea84d4bbd4de0a8c1f4bc18e0c1aa7","86c5c6d7bdef9a749f5fbf177455659e1ecae4795511d27e9c9fd22a365d1942","97c7882389bfdd0af887fb651494b6cde00f1f0d23e97a76e1eab494f1193ba6","2396c5d414a1c63fd7f1ab26b819e742b96f6332bf2618c9b58a6705bdc012e7","1ab9c332ee63b9ef4b4a3177200339274c836d12957296a766d162f573831688","dbf89afe6d70cd44e5ae9f2dbd99fad201b181b98543486fccbd76400dd20f22","e5097c971cc13b2af80110fe9af369d98cc161f74bfd8fb7b01ae61896a66c9b","7b3258ade4128f6c1ddb4b723cc53273d903569c19f181f85643e056e5cbc659","6d021997492f2ec6d3d50b9ee12045d976e267450eb0fb1e31110be8dbbb6f38","e3337465312a8871a96efb0ade03deb67d9f2b05a969c667a895567781acf005","0889ae3150c7685b34e529b715a23984c1ad15ae15f158815b083df85c4c26d0","681b858a978b3dea64df3700a937a058d6290a8e519185bef8ee7388d7739dda"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3162173160 · entry 108e9186e8c5677aaa5c…
Expected log hash
00d82a97e8d5da8f3bb4a78d598390d6b030eb8338f0e0735ffde6aa5047ae68 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791539060014","kind":"published-quote","locale":"en","page":"brand:surfshark","quote":"Why do you pay much more upon automatic renewal","rating":3,"review_date":"2026-09-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.surfshark.vpnclient.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (47aef0bbc5d3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.