Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“c'est la meilleure app de VPN que j'ai jamais utilisé”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514496096

Proof data

Record hash (SHA-256)

27c27cf6cdbdb1895573c0abf3455c9142f2c0a88fd754a9e19d2e75ad5e3f10

Signature (Ed25519, base64)

hO/2NlI8W/MBhRLL6FIZwHcJnejqPFc9UEFLCD7uQQ2/E5GdBhWANS2gR3j9BAromRYz7HTDoYLM+TFFNKZgAQ==

Merkle root

790984da83ec061260aa072fed7636f9dedf91964fe0be93d7a7a622b2b5a92c

Merkle path

["27cee36fbaee7e3345e5b4a07dd34c2588e8b9d2be73cf4ea2a2261c1b0695d7","06b76693ba234dae8678221e61c9094228bdfa18686161f4c011cd2593a77d59","122c29fb36a142a8b5cd38abf129f7a317a7e2fc889a3cf354740db1f21b8da3","29161d8a8e8f3b03e663541cf270e2b68f4a1301642869ff48cb274daf78287d","5f5b44d6917b30bd2277b6cf98973b26efd78701ff35ff093712bf4a81e3be22","1fddc79cf910d45f6cc73772bb51ec111aa1acd0432cea544157537a88dace73","8592fde38acd99f29283371b8e2637e65d2d9893cc5d18b7c609b331b0756ba5","67e87b1c5c54e37d6a1ecf2ac3904db581ca0385a8c7dc1b3ef97513143c17cc","eea3a75d2146823e506e02a28281350fa6eb244720ec0fe70a211bcdd79271e6","12ee5e3bf7843159487d61496166ba8cd3f5b1569672e5071bde05a0ab3086f6","56d2e6c2783114f4df5be450bdc49d60965b9812ccfdcdba3cae2bd69325fc76","f93cd82827d90a4b1eb29517ff80ea57936786b8c516ab5e1810cef538a9e460","03448bed473af8dd9cf28b70fbbc04f05d3dcf46211926aa98113fc3caee3267","b5732ea5319a80c00443397f423c046c357d98fcdaf87d445516405ed0934bdd","c7feebd3045cc2c03d87ca1241b2d06259ffad35db645c59ca3c5ee2004a8947"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514496096 · entry 108e9186e8c5677aad27…

Expected log hash

5d2238ef768473286d75355f523ab94503f4ccd3d25e17e9efb265aa0f540183 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787129810322","kind":"published-quote","locale":"fr","page":"product:proton/proton-vpn/fr","quote":"c'est la meilleure app de VPN que j'ai jamais utilisé","rating":5,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (790984da83ec…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.