Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Reliable servers.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2631758752

Proof data

Record hash (SHA-256)

12a46cdbd1e8ca4aab760fd2508bfd2be8e39cf52c3b773d98d2bb4e9b5c7d46

Signature (Ed25519, base64)

BcXjdNPgUXg1bTuutROq8c6tnhllkyV+RiRpInHNy+vWoNjriv+qGlhowuikWkvnU7Ml8ZiGyhmijGjAAXL3DQ==

Merkle root

a705e7ecc0d73eb5dcdfda7cc03235bd57a2851764423cac43118a70cc8e7b3a

Merkle path

["12a3f76488f48076e68e3e981e5fb715bc1056541f99289f307027f679eeb0a6","ffbfd9de84ad038c3a561c5a09e720c4baf34d43a421763958ec1a0d12009a8f","ce1c500208275fa4893de175146db6cc3b6cf4bb81bafdd774154c470fcf0530","237d577b7eaf18c6c1f0ff227c5eafe637747e6d11a239f964d3856fecb48e42","b424e587da22e7a26a3178f6e4d72ef2b3d34405014c8a5768f9fe2763add632","38482e76682dfec12b53883419301d1ddc222ed872b0c8440a0019afaa213edc","7248a3e32e099ccb8bfcb4d507b9a07eef3de26339526e0c5f59453941f0854f","c8fc9241ee34511821af4bde326ff04b633ff95c34a24c6fba9c425a4676cd28","cfab9f1a0e7c2bd1911b2b10a168227bd6e68220261a819f4e614a538e17a8fc","ed211ac17236e87eec7a4de0eabb07e3e51d5253e7c4edeb41bccb1080457ecb","261279ac23105edc3b8a42240f8ddd39b5163d11d78427c94d40857d91f1a531","3d0dd87ae572e5992156e110773d66a0f1bf3ed6de2e93de25b994313f23112d","654e62da0e54472b4b5b9c8deb017fe0e371cb74d7538ff4ae544207e1da0bcc","a2d692bf5b7994c15c39856193482ea7c968acfbc3ff4915a355d04b18f7a933","79a9e38b2f2eb947c3bdfe67a6a6b2d9b99dab4a357fdf9e6328275c8035e767"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2631758752 · entry 108e9186e8c5677a44e9…

Expected log hash

b9abdd1fc769097342b82449a3caa919f2ee8419634ee5ba00692ee6314109be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787969636370","kind":"published-quote","locale":"en","page":"product:infomaniak/vps-cloud/en","quote":"Reliable servers.","rating":5,"review_date":"2026-05-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a705e7ecc0d7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.