Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Und kann es damit nicht Bestätigen.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1a25b64979c58a0d930e5540d7056bf3a70d13bd14d831c60f08eaf755c0cdf0
Signature (Ed25519, base64)
kah5tez391mn23dKX7X66KPxdLKBVV4IgC8aRNcxV7Qf7Lp9z0F8atVf+tQ6BLWji3u+BDXXAZSu6VGdpx5IAA==
Merkle root
aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path
["1a24106fbc586c0f8abb203290113501635e0dc753780ff3e8a1479ddf12c979","23d9b7d0fecc6a0c344ba0a88debc8b48b0c7f378bdbd510d76b749038a3a69b","300ae22cab8122d4c8512b31b7a8c347839b40483b22a7ad3849c07a16f06318","df09ba35456e87bff452e1e8aa81644d7abb932a813e10655016199ca09551fe","d151a510932674777b20b8e48fce8d8e5b366b9e075569dda739c7ccc61f6224","38f81662096c86776ab73fbe79c7ad071d32a7b0f301517b5b1824415d21ebd7","82ceecf586c0502e73dfe64b6319dc8df4ac6be48583b5ec4942f99ae21294ca","8076c9f7586ffde69ad7b2f3a31b7c7d6933322794c9739dc0653073fb57ffed","e5d51e1bf757768ab5f989c651ee62dfe84e94a109769cb74a864649e9656481","58a02e7b4fe759b95869f252af62824114ab52cdd89fec8dedfa49852ce90b06","0298a26818a13ea3025566ab2db6a034faf816e34b7a1e19a16f7e3fcbd87002","7b8ded1b49351694655c52a46b67cd12e02f2a4c9ca9c29916bfa197957ebfc1","24192d1fe3fa8596b225aa5d8055e7e92d26709ec190f1226b913a3e227f64c3","5366af6eb1ce50b0f459da15c1d7eb12649d0477ecd930804e506d3f2ff66aa2","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash
bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787286345433","kind":"published-quote","locale":"de","page":"theme:relai/ordering/de","quote":"Und kann es damit nicht Bestätigen.","rating":3,"review_date":"2026-07-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.