Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr gut aufgebaute APP.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2681752502

Proof data

Record hash (SHA-256)

168a79b5fe55e01b45013133526a8aa10feb41df56a02bfa4c12701546fdc1f4

Signature (Ed25519, base64)

uHMzPj3I19enRZp1gBN2If4J6y656k6tPvPfQ1OeI8VevUprZBufLjtIQ0nSUQk/CpijsbI+k+6W8ciw3mwPAQ==

Merkle root

72c0aa015cd6b00ebd7551a6cd34c5318c1eb559497c85c40f41ddba3c674d1d

Merkle path

["16911b6f336cf6a408e1699006212ca7b913f614fe028190ff0de7b084370247","dffcd9c28f8f755009ded4325022b2fab4036b09e5c910a6692592a0fc802d0c","10fb899d19d3022aaa34c31335cb3e7830196c6438efa6a7bee942edd7e130c3","9f18eae749882cf505bb9746def0b9182f5785076875926fb5d75a228753dc82","8bb20bf74253173db11ccf2e9295a8c2c1adb4c062c21d5d202311444d1bb454","6e9e70eebcd7192dcf1c34257e2f6df090c602583e5a60b7d5ae2ba4894137d8","b7206c8e9c7959fbca371f5702c3895f67e31097647ebe5437b86b58837cb038","15cc3225a4815e9e537892abdbd5825dad3ee31ae9c57d4c406b1fadc2b87430","719c80c8a8c327c6117dca39a15634976d927f43adb36653e68d2dfc69f135c5","fa6d8c6b1a3d46c1cb49fab29dca6290b42f7cb7236302ff05be3426142f8811","a616b068fc57e2e6520ae199a115d24c599fb67b5dd353776766a0497ce19500","e31085be7ca816ab8933f6e6594e953f443dab59f68209cfc014148284cde871","c3936f0b575e45796525d22d8804e7f6a2424fe3c025c9ae69a0548c2f5425ef","973571fe9e8ee02f91997423b3cef33593b4184b3c20f8ec94b381ab9623df52","eb7d383cdb8c366a1090b1489555cc39467112e2c4098fb0949786fc0e9c6076"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2681752502 · entry 108e9186e8c5677abd0f…

Expected log hash

784442a9aef69876f96b752a429b96548b5453a825960abc7fbba35f6df60c47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788306517012","kind":"published-quote","locale":"de","page":"theme:findependent/quality/de","quote":"Sehr gut aufgebaute APP.","rating":5,"review_date":"2025-12-02","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/692ea6605df4cdc1978fb487","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72c0aa015cd6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.