Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die App hat sich aufgehängt”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1306e0e1b99853e61afefd13fc4634532d2f799bdb9243b10281bf841a31a854
Signature (Ed25519, base64)
S0iCO6x5R3whmRdV/gtAEDzj7LZl/BiPXq0T3qnQ1sIKJyZ5fAAhIRRRpop21FnlVVIyQ4vRLTP71uYuJEr6CQ==
Merkle root
21e7bb8f2fd2dd8d8171a23c0a79176483db4731970a3fe8e0e328189fa103b6
Merkle path
["13086e2d43f572ca86b61c5bf72494be53fc0a2c05ce2d56d58622e0e409352d","aab5e6eb2157e2eb0ed3047d4a63cabdf279d7e2a163e0e20f8b2b3c0287a620","fd0d88596bc2a467b72e9f01da955925b1085a18adea11ab4d4a6959f4b74623","46e64d1ab1e7a199d4053f9b4fd69fccbb41120691063e2125fe3989b9fa3145","bc813f7f0455808495282b87cfa39d6ff09f84bde50e00a56f60a55b430624ea","c3784947d3db09680def01766b667a9db6b323f91ff8ca0c2487d9c74570e701","7ac2dad616a483d3d7529ec496434d891228650cdb7be7275f448ef0e151db32","b98e908aad039aad70f735e135b5687c6c082eccf260ec0113511727ca2c9438","82debe2513c2c13f68c69d95bfc673abed7035286b69f929ec927bd153a302b6","c00b881591615a93a29d902808b084252c7f0a2f706cbdf5f8ec0c5c63ce6048","88ada35bb78b27ede593e14711da944a3079634fdbb1e8fe2c1d64145e341bbb","a27949797d6acc76608eb2454a12e7fa3b0e23a9ff082297ecb4e8dc4f5f392e","3cea60263bc32cc376b16e1efd7740bffcfc93464b1276fab6e76a09df031faf","26fb1a8f86dacedb6315aaada1d0ce79d7f80a57d9cd232cbd85d2599cf8282f","2b3a1c21e085528ee4dbbc92da4d806c0eacec4cb4b4d9f473a6ecd411dc064f"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2622255255 · entry 108e9186e8c5677a7795…
Expected log hash
f2a0e8f2b4dab3949c746be15f65076279656fc5309daaeff038c9a778ee0653 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787896781880","kind":"published-quote","locale":"de","page":"product:pixum/fotobuch/de","quote":"die App hat sich aufgehängt","rating":1,"review_date":"2026-07-22","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (21e7bb8f2fd2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.