Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It has become difficult to connect to the free VPN.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514188040

Proof data

Record hash (SHA-256)

2d47d7b9882a5e4809db329da3f769e05cff2226986173a5ae1162bfed0642ee

Signature (Ed25519, base64)

OftHIBsDzFUHBXvVampYQa1c3fWbaB7rMY7HSG3ndKLetgJe05u1cFwkpddOr0nzm4xF2svSwq7kiFF3W9smDg==

Merkle root

6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee

Merkle path

["2d47e3b1e48c9495792b4fdc345837140259ee27ae51a0554b86090a39817ac0","de2c7742b080708becd20d692055cc9c43f166470443a0161e53dd53bda57e87","20c57c5df7294ae06cb15f636e14c7aed977e1689c58567b1a657652477e0371","fc51a90deee78751c1e810a820542c30362dfae1505fc4d49616ab1a924aae84","60aba1fc7ad37ebff7196c0dd61ff71ee4aabc1293a2bed1dac67ae5cb53a0df","32fa8f2e362853d4fb8599657bfe2f9940d5ad790ff8962cedd96b24b3ee4448","e217f48e21917458a7ae8391f14545381f324eb4e9d511fa62cc78c0743d2d77","7e91501c762e39543ef729af74d6ef9d5b9f94bfe3e1ddfdd47f4b65ca1c6c99","f49e99d02cc9fd744c523c1a0dc7b31ee28c58fa1acebac998b9d6b085328ccd","6c0625fcdd0f0b42daffb858f2dd4906b97c4f45b7c3f92d57220a4cde02aad5","590e5c842af64b1c9f9ceb245466c6066620f6812681249402aef21d18e3f0f2","d1c68f1cd3de2e5e2d0c9d04da41e9dc333f79c9c386610362230581e6b42f6c","b958a384cf7d9aa03e4b31b4f9bf91c7373d0ec1d74c1ada80be4b2b501d99f5","f786ac0debae9f349ddff34e280cc8a64ab579a73e0a3d3745d84df0612234b6","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…

Expected log hash

b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787125125654","kind":"published-quote","locale":"fr","page":"brand:proton","quote":"It has become difficult to connect to the free VPN.","rating":3,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.