Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The price is quite expensive considering there are other good free options available.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
22091171dec0bccf59e6804486dc26f303f39ae9768da9fa927a7d5984880252
Signature (Ed25519, base64)
hJUpkJoNtkh17jBoDEMoI/A6LssgzfP5dpwej42Is82P5g4SlxCyl/RddnYacwLdufyjTalKQeo0yqd6IMEKAQ==
Merkle root
e302b878b844ddc4c01ebde52dd558acc39681368181eeb0600440538713f92b
Merkle path
["21fe0f38aa59b38af5073ec8bfc1c040be0d626b509b1fe1f1d07900bacfb5e4","645bc4aad71b874f356e31f82195cd9a9bca69fee1a8ee5415f31bb1fa5c645f","06af9e0d476b53ba89e747b49a39b2135fd91b3671288f6a435cd6219b3070e2","dc25f36a9d16dc392675cb9678b8a9d29bc4bcc508b53e8c9d1944f6063eadd7","f2dcb7a995965b7b04bc202027672d2dcc2afa3e48a68b36a3e6903afa623919","3a67668eee2993ab76a1540c7119d8e5dcd8a79e1f0eaa9e806ca6b58dee6eed","d92e1ae391ce6d1a36d6742b38d554ae96ba2fab3775ac76cad074508fbe826a","0e1a26da9291aa7f8d8b2ee4878123d5c7335272155e6b3400754d59d2fead38","6c5dc000a5dd1ac133037fe2a7230949cd591c5a4fb7bacf4963267122e399e4","93d0ac51e9f0255acd8cdaa14b874ba7111b13e32d64ed7f658eaad4c327324a","d86ce57ef47698dc7f048fd4f234777414e0441e4327e478aad90a3d2d357a80","a16debef883d10ff0e3a9e02292a98bba98acd12938e6d61ee66f46ad60dc0b3","b37050522ba2f37d0ddfe2676968e2985c7f32e0abe1ec7ff7ba6f14a184838d"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3666350239 · entry 108e9186e8c5677a9668…
Expected log hash
d75c7ab37dd891599f542e30de9c2c50e9ca3ac46ace45bb971b20e677a04734 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793701017712","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"The price is quite expensive considering there are other good free options available.","rating":4,"review_date":"2026-01-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e302b878b844…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.