Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Beim lesen der Datenschutzrichtlinie wird einem Agst und Bange.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582625066

Proof data

Record hash (SHA-256)

18c2f5100f9bcc64cced1784fef936dca5071689008b8711c03484a9453ed6fd

Signature (Ed25519, base64)

vs5bZ89vzms085yHRzvtApK6vmnWD9lpXcAvy0x88QiH4Xpx+02eIokUnWuPS7DvtIu31dbHOx9BO794Hls6CA==

Merkle root

eeae4c43ae7ab0c29c10de74b2463aacd3a5fdc1b3d5af1f0cfc9c44408c3d2c

Merkle path

["18c93b98057b35dde4e060da47f16b22e361dfd3615231bcfd2322d63d297060","bb8682adcd44a20c062d9708dc2f163c301071042e0937e3578bc5238698bd74","ee998ccd9c8ca11c22cf759bb65167e4527f61f5fbacb57040a045073d9d65ea","003e7b54c9e9c825de8469993974f9263adb87cc91517f0f8b1b26dd7cdbc944","a409ca14832a784ea510bf71e39808bab9d222a914d161b6ea6d93e9f4cdd10b","4c31104d18f6283896f9b04b073ec571f495220f1f0922753b8042aeab8b2c2b","decc6e80b42a9e10fc8d03e5aec3d2db86319dcbbb2e652ea947615e9fda7c2a","4ff7e6521c25d5f68150ce29ee15965209b26e37b3f5481586a908fd498a2f00","f9882c63b6272fdadcb5cdcf689c9228e2268973259967722cfc5e6b8785c3e8","3d8a11e7a4f8a28f7f18a1e49c1b332d32173933b935b1ec50218207997bb5b7","601a0e018b703796fbe7ea1e916c6cf0cd74116684cdb2f758dc5f85ec706482","e32594de7b27feea1b1262628242e9de2c08ec303e68de15ed59af86672ebcb4","09ce2032efd09c421ff5e19e5f8876b49dd7ddefb2240728cfc215a6585cd9c9","9147eb1ea2bb6aaaff51700a1e53c8abaa5e7cab4502c6a4e1f7fda7aaeedc63","8d2fad53fc3e7e38908cbd16989002a31ec7c97679dda7189a08552bb7f22778"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582625066 · entry 108e9186e8c5677a8c30…

Expected log hash

0b31ace64a4c196ffe669b6f1b426aa3540d319d39e67b6031cad355cff0975c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787627443698","kind":"published-quote","locale":"de","page":"theme:findependent/communication/de","quote":"Beim lesen der Datenschutzrichtlinie wird einem Agst und Bange.","rating":1,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eeae4c43ae7a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.