Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J'adore ce VPN.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2925c7f46f16c97057fb40ea857c44ac2704c2dda31fc9259b61d154ba7c701f
Signature (Ed25519, base64)
o3nysf0IMovMIWRwMraHeDqmFlDUyTC9QwOU5w+6QriLniZFJJgJm3GFfjlJJUb5Qg+7LHN2ml86pI2inT7RDg==
Merkle root
2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793
Merkle path
["2929f38f108a1670fbdb06d94c69ee1af66701dfedf33771b035ff9b881701b6","95d6642b3a712b2dd539d7c6e233525fc573f471c421c5c1fc63d00982b9e90e","5354178197334c025a268d9221af5d40cf34db08876c149d8b417c909adda80c","cdb74b8ec232a7b567346566898d81d15634d2a7a0195794c85a27eb8068b092","b17a88e5051ee9977fdc6bdb10e0b394d97396b91c1417388ac87a700932356b","6c6f7ac35d38d66ac72e8d2d5157adba1181c98a2fab6f0e2f8a7864cbf71f1b","6c6a15b8a85ea354d5fe61957ae2d9cc8d323ac384dd87f5cb8daf99ab8200bf","d1cd63e50ae85af276d8f4668d24b95c508f4c426ef49419f96b677095586972","03fead661da5b45087029dc805e33c569fbc4c9cc53551990c29eea7c480c584","58883c061bad776c44f6e340342ad6a178957f7497db2b01ffa02a47c8cc3994","a0a1676c12645f2147a72f1f4d6b1e65ac243d6ac31cee3727236b82a6199c04","f725609c8151718fef0dc1c6e7e63f03f706174b73e17da9122e9e82b68d5891","ba76741958cd5d10023d06fae1854e87ca4f7796e3b348ef0ce4e28fcbedb31f","050f107cdb1609dc86518317886321e69049b34a0448f95e4f79cacf68b9e781","01b2a2b6a3360163596fb2e0a65565dfe0e65177610b2a84b39de142f1dcaafd"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…
Expected log hash
ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786933230052","kind":"published-quote","locale":"fr","page":"product:proton/proton-vpn/fr","quote":"J'adore ce VPN.","rating":5,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.