Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“my connection is unknown and slow”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
17b9093b60ed302a74f40d5a865ef12f840573ac403ec528c27fef1006937266
Signature (Ed25519, base64)
oNgf7rZXh4MiJ56283jDhAtLs4CH2LfmXm1p5klcloo/1f3U0hONbIPXSP+m+c9OkIWowRP7SIZ/nlCqkZA0Bw==
Merkle root
0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path
["17bcf8a6a8b56777ae778282aee73ebd0f5aa497b5aab57d75f9aefc215d1e1e","156fed3a312c07fc49c131454783981e9d280e4dfe08090c2b38eb743c349536","99a5e8f01b6247cb7c218c627f6fafb661cbc60158417b107c3ced6fe6153204","2e6ddf8e7dc03a2ee964769b0a9980e636649f590c214342894851c38899bf87","9ab2ea361a19192bbb6dd92b573663d740121af1aa6865ef6485f846558dd56a","75bc06458a42955266f1ddef226db5dbd44e02390105a4251cb5c290174700c3","f1034a8342004a4d49c69fb3c6064c8e7bb872e489fab9dc2f635905194c7f5c","f0f7c816b88e81d326957f11d8ae0945b1cdba66baa12f361c6d40696db97d47","032f17986a49accdbf641de89225366b652602d735e991f598d3f710e0a6201e","d3726eba4573524b7dd12d159a2ebaa8f73435b353f4aced3864546ce5fb3e04","33cbb318f490ec551167ede4eb9b00971e159d649fefae9f22b109b357c3edfc","aab51e2412790f739095eae6d28bc9b4f817dba064b561c920a4f60198d031a0","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash
ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787975494243","kind":"published-quote","locale":"en","page":"theme:sunrise/service/en","quote":"my connection is unknown and slow","rating":2,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.