Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“KYC-Betrug, bei dem grundlos und ohne Verpflichtung Daten gesammelt werden.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
22c6e62f8eb3fce4d148206e1b8ad299cccb8eee33a1badd29ebc2d84d7d4b80
Signature (Ed25519, base64)
/Pf7pbRSwOHym1NA/bMYycpsF5z7fQgM8MqWGsjs8IVaAfJrU567AGU5juLePyUZeSPhrkvftflLxiWtvCGTBQ==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["22c989f8f99b8f98c3ce25f5ac46a94620d03d017f855714939a26fd5d629389","480d20d320e6403db7b940d8d11a50b4f2f84f54b06435203392f5269148970d","86b7f9c8ff1d813be3c23361098a642b1a44b9c56590c9b4178520aadfc5ca15","95b1d094b684b5a4dc112336b12630c51ff3941dc21181888f20e3764373c7c7","09c609bc7536e20e15ead1074cdfbac800afd9f4355eeafe9d15b076e137db7f","a274ef2b5a03abf2612880a2c872e3fe8c3e5c79294b03b0763da2babb333b2a","64c43d02e47db8d455d8ef19c095c9a8fddba105ad81f8129ac9920c71ea6439","49b0b4be8fba0435e81ee9814fde10af5569c2e3a862be2d0937460ffcc3faf5","b0e25122bc2fe040eb39fd34ed68c67436febbc540e704df1f57a82cc026b3a2","3d6effc12f5513967bbb62467b07085fda88fb4ed6ac798f49a22014fc05b0ad","450cbb8d3b95fe4328702bdb18b37c3747ee5d4ea0db9cd6c1d0c264b25a5f30","dd4a51c39ef5fa93876b3405416366bbf3a7b89c2c89374c78e1ee723166ebfa","4372dc9da9497fee58c424202bb40227ff1140a098c2b49beac2f4c4ae9a0331","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"de","page":"theme:relai/communication/de","quote":"KYC-Betrug, bei dem grundlos und ohne Verpflichtung Daten gesammelt werden.","rating":1,"review_date":"2026-03-18","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.