Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I will not be renewing.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
234c77d110ece55044dc61694e3515a40ea0cf25a116962594a42c35e30ecdbb
Signature (Ed25519, base64)
SBJGLW0Sk4ohtWOcrmS/HU+U6qG99PYGqCMdZ8vXc0FsRJRYm3By0aThR8HSqMFN9FsZJgb+hehQ8oLubzs4Dw==
Merkle root
6ebb2d3fb78e4a08533ac6b6852f3c84687141ae9b0e78424d88bb4161267bbd
Merkle path
["234e1cfa82ce7c13606b937d2257901fc35d31e5eb5e8c42681723aeaedca18c","c4dfe3d854a23f45fb78c106153d2f8f690e8eafa2e293d37a961191727d2423","7ccc80e6478ef1859883915e645821354e2c6d6e2dcb8bee3e40c852d3bede65","4931ef3cd31bf3d00a39d373566a3f8ba27edb8b443d5dc25c3c2f780fb19cfd","088b2f9e1d746930f6dff49b624b6df2eef35e0895b0ef372d33e7288dae53c0","9e7ec292128d2604a355dac1e8ffbc49b9fe87cb540dae0125a32c6c5bb2414c","938a502eefaad46dadac3893b7d5c521f7d781787ec3a8e54757f4c3dda515c8","dd4c494744c21c89f2cde637a76d358e30a7de6623ab4db223a0245267a860e0","99cbc7c9b2beda60b572b5a5a2a86a1de0de0dedbe568a6cd9dd02196791c3e5","5ded56443510d8c8115833d519272d0a72a50f8b3c21dcc334bb9630ea976695","c6505d62fd1f18a4c80c5faa97487c91b8a68d4c0c27d65e4983982245aadb62","fc73c2b0627636c8f676f008d05fbbd4dcfb7ee0af08432d0bea252601b2007e","b2809ea8af334e57adb596cf07ef2c411ca41ee72761a0ae0fbef01d75a71a23","32d6dd564d479cc6b7834d44d5078d8ebc72c40210e72f0d380fac04d2d8e87d"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3273209361 · entry 108e9186e8c5677a732b…
Expected log hash
bdbef22d23477d2ccfe2ed182ce8ec54934b3bae489c9913db850af171e33062 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792121074379","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"I will not be renewing.","rating":2,"review_date":"2026-10-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.nordpass.android.app.password.manager","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ebb2d3fb78e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.