Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bietet 8 Länder an, aber nur eines davon funktioniert einigermaßen gut.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621780523

Proof data

Record hash (SHA-256)

17db243f9c2361b963d38f3ccc81d61cf8f8b632ee97a4228f761fb7a54cc0e3

Signature (Ed25519, base64)

o0GJ8By0agpDwGQBiYJSGpW4jISNTn3Arx79mrGXiRrAW3FMwvBPfwiwgOMZs7H9DK0u9522DpzC6Fl8u3BaCA==

Merkle root

7b426d9a8e4778c60509753003c7b551184ce3f76e1db9b678c604656c147d81

Merkle path

["17e1a3f511dc3f6577cc7699f18632c66907f3d6eb6798bc0e0342535970fc5c","0dcb511a33bdf69b529c77b2cda124a72e6012008a9e0db6feae9f19e9263954","8fe534acf6ef7dd1128bc2d8f29bdc1d013d1d79ff9f4ee016a598e20f623100","ccfc6e7e04c37519e51c8262c1e919938ea5c5935a900b6673dfd261cdf1fb78","83b4bf0e678672e77a0cbcbd1e4b7f157adddcd656edbc6f1b095b21244729ff","42c922d7f0b16ade7ce41806957b7edfb832ec902ded770eb88e178619529124","28833a4dcb16670617657d84ce53ec14770c790edde713248b85fb62d6a57085","98fc850c6fbc518c14001c4c70e8cfb3acfd7d1a5ce7714381c60b205743e7a1","e566d71a74026b8f3239cf95e75f8231fdcdb828d2dd360439879027cffa5672","bdc7fad568e6303001030496b2fec8e73e747ec9917e9f7ebe63ddc739b9840c","6017d77c12c9fb7066bfa482470458852e46e19bf72c24781b9bce1b1de98c70","e31d08beab788c5204f71c66f1aae19ccd2f41215c44b660d35802a0ef79d3d2","5d99da9744e8307e1a97e2467f68825a2078c23dcc4b995c9e783f8caa323115","9116af6fd18052ff80cfd3abad6fc438171b3496be1f90c0fc1ff476ae16bd31","6fe79142608c1fc8bf2fc6f4e46810b02dde5a2430135fbb3f3615b6e79ae38a"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621780523 · entry 108e9186e8c5677a0666…

Expected log hash

8cedab57a40119bdaca7f2b5c6cf9bb1e2c3e69dc6a6b7339d16a6592c70750e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787891923870","kind":"published-quote","locale":"de","page":"brand:proton","quote":"Bietet 8 Länder an, aber nur eines davon funktioniert einigermaßen gut.","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b426d9a8e47…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.