Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“einfaches runterladen des Programms”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
144594da95679a59b55b49d28ceada9b60708b7d763f9b3ccbdb4d1a2f049a45
Signature (Ed25519, base64)
TEuQXheTMWHXb48XlhPB37p4Ad8Gpg5H99WjFWOrRqMUb+1/b/j+jVMlR4vwwnmQ7ad5gX5FGIBSF10+P/4kBw==
Merkle root
7d99f509e7ace975d9131b3c79b0696005344fbfb76691d26003921d8da3f0a8
Merkle path
["144643cc7eb8ffe9bc43d0884399e1b0de82d0e55a8783e39775e9810a0c6ef1","f4cb1eb4fc418f3b70d30e209512b8ec0a2da33c7471c82f126b76d04357e83e","b714e220860cfb4a7f1b855a9ec20263befa23791bf464a276b2feb337aebf80","290865b8cbd4fac3cac1eb173c8330dce9bf0d540700e9beb30b62b76f8afb16","2f968419eb0469e2e125680797425f6b288cd57c78de1955ee780cfbe0015ef4","4e106e37b9354e0e8a1ffc09a3670eb311e38da20c66831536a312aad037f02e","f48f1e02613bc147481133336d5b24e8af19dd74cab770ffb91cc5099d471b6e","e78a754fbbd57d7de65115c22e1b97054e9099c0284bbdadd2f26a71bc9b9ce9","b5c8aeb57791bb148b9691c50f6386bce88f0a31bd7b751f2308f12ab8e86a79","a9d6c7aa96a544e5a12a36afa026d7e7c88b9f346bcb43e54b50cca0274dfc5b","bd3b03eda55ce61b538fa1682c49bdf6ee1cc5751b2d07e859a252d0ebbc0655","2dd1d85aa612c9c2dcee8e6a9b8850d0d2d4f889a64425b9d1763b23e8368be1","d2b7e5c12695b255ce635bd70253d91722143b48b301c96d105af7fb07baf59f","b2d461fa5f2c77d97cbab53545a3c371aae019615d29ddbac5455b43209b8b7e","aadc4b0adc99de5691fd30e8e3c95e2c0cd69be4c1b13f7bdc389fe5361fd614"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579313751 · entry 108e9186e8c5677a5f78…
Expected log hash
0bbd23c1386f7dceb3083c4e5ded337a3a2fd7f76cd0c544d38ca853af72ea2a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787536862564","kind":"published-quote","locale":"de","page":"theme:pixum/packaging/de","quote":"einfaches runterladen des Programms","rating":5,"review_date":"2026-06-28","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7d99f509e7ac…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.