Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“WARUM 1000mal WIRD GEFRAGT TWINT BEWERTEN??”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
204a38f6a2f90c94283c6152b4aff224eed2fa2211b7dd002cc54b304b6585d9
Signature (Ed25519, base64)
WChmnAGIOf4NUoQRaZzeBbnoudlTou2NTD+Fx4QD0basa5L9r3+PoUpj6DSUpcPBMcmit9QF6lZVFirBENQEDg==
Merkle root
825dbc6ca55f00c6c81d8de0f7a080bad31b79dfa0e721dee7ded0e9c294ebb9
Merkle path
["204c6264d364f09399bba3e78ed2a55bf2745006c26f60ddc7144310912cfec3","2010a11e72cbd1f48149d452fc67fe1301060aa86f81d29d93d32be342fa8ead","a0ab53759f1f145d0d781085d92e4da6cfbe259a723aaa0c93179b43b2862eb7","438a1481c6f5c2ecc88c1f581fa8b72df8e06ee37aea521bc3185cadada2b5d1","9aacc21b0ece8ba0c9c708eeb1c3a45fb43e0f6256d29a7129ffaf9bbe79e6a9","dc0f4b06a8a50b3d6afd55a0f9a2af9fd5d98cad296753663ab49167e105602c","909410b0597dea410b3694a083db8ed8a63211b18113aec833e0796221f184b6","8c43e5d4b2c29d54d3cc2d2f163c1515a47e6ae27449f169eeae4bf9f2e11d8a","25f3b41ab0ab34313a95339570e3f19484eb553fbced7c390878f7f6a785ece1","a57443d871f46e626754946f83f3945dc441e8fbd6fe7835cf79d24455c7c9a9","660d6a765109c39ed132fb0afa3dd507047c73076af21c08ed678d2a0c4157b3","9c0c076fec2f0fa7c1094b4111d2e5cedc7ac35232c509cd9a25439361474b1c","1e2e9420d8c4747dca96dc342727525f4c47cf2390ef42ad69829fe37156235c","04c4bd8a9ef95bf5648c9d023612bd1f2446e83a6dcf83e612d031a5ea30e90c"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240422411 · entry 108e9186e8c5677a0ea4…
Expected log hash
8667b0db28913263098c19cb6387cf64b6d68b1b8f2c4242d3139d96cef5da0d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791861703078","kind":"published-quote","locale":"de","page":"brand:twint","quote":"WARUM 1000mal WIRD GEFRAGT TWINT BEWERTEN??","rating":1,"review_date":"2026-10-02","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1225135057?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (825dbc6ca55f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.