Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Übermäßige E-Mails”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
185557624b7327ef843c76a836ae8ae10df4d7dd94a835e0dfcca27711744efb
Signature (Ed25519, base64)
gCbb2gbAhtGgr7ABBcCAUGiYwBawJ+qUiUVJkmHN65n2o/VyWqyOVIU0FWM8hBPzC9jYrbk6cmEzYj8mwkHZBA==
Merkle root
660baed4e0377456de35deaaae5175a04c7f97eefbd7e4cf12622ca3b4d2f1da
Merkle path
["184ef60100a0e2f3a1f71cefd7ba95cfed2a7204fad460e36c0c9671975bfdac","88906cc786c10f058f6af7efec1a9d9087b8dc2e3f5b249e1f12b47f4bec2301","40a060ac185e2b21aa57afbb34b76df17c1e7aae5dd2b4a5c280f3abc6fb015d","fd052eadb20768465709d2b3375d9253905173b0c8c74daf2e335cb457c2f16f","747cf696fc1062a1304a05c86d178499947729a9a538b1eb080a0f8684029c2c","b3f4be9dcf6d8ccadf2418b9232d618f00002b5c51fbb8adeb9da801378a6f2a","d4a36bfb33b923430042255e0c02be6ee4e6d425d7a09b577a128e2ef317fe35","a94aff2b0b0cee9e1ff1c1aa4a9049981c7d20b1c2f9f337b3fd33a66f72b203","7d5a55424d41cf323d3db19779170c8b49ae2a609cb5f07e6758f3f00293fe6e","0f16b412c7aa8d2aa9699463820c2a4dcd61e354e3981ec49f20758ee744e2b1","3c9b38b8afd8906089bae613fb9920bd38443634e09fba502d797d7d2a9ab3d0","5b09628a1793be71f721749c11bc8264ef67b297fd8f81dbc29973bba2f3b767","42d6550ee6510e7a4359325f358ae674b1e4cd9ef1ca4ccfb06287ce6e66bb53","5c90b352bb5f9ab82191da9d2c3a234dfd13c825669e72561a053f4527db159f","5630fa9d6feef716b6c1258fc5eb760f694f65295ea9e96a6c74458fa17dbda0"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621031423 · entry 108e9186e8c5677a00b2…
Expected log hash
dab7f5bf20d800f31a15ae5236ac5dbcde0614ca00650d0e0adb5266739266b5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787882628316","kind":"published-quote","locale":"de","page":"theme:findependent/communication/de","quote":"Übermäßige E-Mails","rating":1,"review_date":"2025-01-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (660baed4e037…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.