Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe es ständig benutzt, es war in der kostenlosen Version top.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2513802575

Proof data

Record hash (SHA-256)

2a8b74a20ffbc974f23e4b219dc8b39f729cc2905c08648f29554f5043807084

Signature (Ed25519, base64)

tom23UvAc716IX22c9CmhXgnO5UZ3s6Zj52mZXByfqbWgLgEeU30+2f3vLFdC0KZB54LBsEfzVcHSLb1OHy3DA==

Merkle root

80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86

Merkle path

["2a8a95b9bb6ea45a1a66688fa4cefc0ce0a536862794f541c97ee5503dd6ba8d","26a3951c9383335ebeb99a5cb8d175a5ee9a60fba8e2203d81efe5276ca174e3","ae4d7ef2b6aed481f99fca75980c9b524058140003a46597b61cd9bd9fea0e46","1a48292d43ced5aaac0a9ce9577d9e05d509a51dbff4e1b803cdf3b2b999d083","a2283dfe3df71b8cc5fae6e6281d95a49fba15b1b04eb8782096c66781089733","da7c69cfb8101ad36f29d59bcb3de065e874fd4a562027b5506a50bf0235f2c8","ccf1d832cf0aaac4f2d58c82976777f0bc65d5bd51c6a2c6dbc4e9deae62fcff","249e003ad1b842d6c1a841421123c1e53cb7e5e6d058da5f5bf2f0c278d6782b","97ccd71c0ef65d6648aa3ff400e1fed4bbcaa0f8249ec97fe720accb5d84f10d","b316d489d11478e8039dd7d9b6103aa8b85d263f47fd8a2cefa8bb69afe10f05","8fb5c1d3899b27e08c5ee594d63d581d84f5cc9e313c1296dfa67cf46bf0c830","faba3b23debb9fc075c521513f94f38a91d83c2fb94ef6409b18f730ae39c109","c0d3c29d57b890f7faa23830cb86c1df3b164402674908e09950b515624cad23","f23007ee336c6a9903bdec729de4dd7e96694a7e2f1071f195563e9aff8dd97f","68889fd35b89925b8d265e65260618471cd9c2f5458718fde3d6cb3829d8f00f"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…

Expected log hash

5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787121142818","kind":"published-quote","locale":"fr","page":"brand:proton","quote":"Ich habe es ständig benutzt, es war in der kostenlosen Version top.","rating":1,"review_date":"2026-07-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.