Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It meets my needs.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2cea5bc5895e5a1035c94e0c3ef1eb4016fb85107a88673c92b055869e664074
Signature (Ed25519, base64)
cEaj2+7dNeICL6UcKTRvbQV3NMzlP9AiUcipAsTzVvGNACjxiK8WN/GurDPmLaINs2K44DGayiSQr6BPohaPBg==
Merkle root
0d7fec37eb7aa7ca022c461398d36283692153bdca7d5292b2302abb6878e5f6
Merkle path
["2cea597e55023d9c11706dfdce2570cb848a3b17075c6ee00567ab7fa0eea898","1ea6558f2b3056da701563eeb8e7d44bde3cbdf24d2173f9b4e62e221fa956ef","d2e3cf8c890590607f9adf1b1e31d39f7d3dd1a08b652c155894b3308ab2f357","f889eac7393438fac232c2d83ebc12d503b3f1f57e824430b241fefbaff0503d","32a64a708090cf1abdcb9edb9f1826f92e7038d0026e55a2997b91dbd4e0acba","fc02b9ab2afd724d018935171739fb3fb78b3d17dc332fb59e94563823e7a157","f381b1eb5736c40a167b4c18a35d296785873c04da7871cdbd58aad02dc764d1","e2f26d7d13ba9a1ce7fdd8162a7dbcbf3a449abee9f565ad5a0b297897b7a52b","b9dfe5dff610f5ca57a2dea4663291c82e7b230eca0e5049115924d19d1508a6","bc4e94b6a3ad2a793aaf620da6691c06ae21e94227700ec4dd8d928534bd5639","d203344055d45c7cf411b720967febb2998b66c133d4186b7736fe7fe35e61dd","154ea3ce3953e7a2f9310701e07b1dc6a4db12547da6d49ffe0215737f5d6220","f77c5de7cbbb3880e295e9751b837c38e25497099e33ceb7e9621a8a350397f8","7c6f9d1168e8a2f5a015e8aabaa46428ad67e71a9293d82f20ec40d2ad6c53fb","8c6d73d3d8b42a55077d4061fe37663a0906972431ecb9eb374f1f8461206839"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3126883925 · entry 108e9186e8c5677a6678…
Expected log hash
7790667e260445bf729ea3061132c2116b163a0e0b944eca343c9e8408350ef6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791359818972","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"It meets my needs.","rating":5,"review_date":"2026-07-16","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1486322860?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0d7fec37eb7a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.