Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Je n'ai plus réussi à l'utiliser par la suite.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2524110285

Proof data

Record hash (SHA-256)

2fdc8c009c9e5b21af0bb79525b5d11406d8e73e6d533ee4aeda991472e446f3

Signature (Ed25519, base64)

TrrQn/MVhUTjAAfvqfHIw1kELOSJoSOVXf6fHG1nq2MEEzbnrI8Ln+p6qZl0nwAn57+Av6H+Unp5gAiYn23QAA==

Merkle root

1154a265a990612db5567445e00872656e7ced32aff0b18660887a40a375699b

Merkle path

["2fde6ac0cf867d4944a368b6844d2323b9d138de002b9190e3534402eb59efac","e02ae623e3db8e5c1748d11527922467ec4ec4daf455c777e4beb00aaa7d94f6","18b7f8d3f56f9be851029c2a8e017451a96ae4cf62bf00d20ecddcee0d83f2cc","d83d33723b8f0523e245d93be39cc8d2b427582506c7e069be5822ca4cab78b6","aa2d84675bafabae4e00fb49a0772dfb985b215291d0448df8ac87cd5ee4e5ff","2cd964bc5c5c393aa0d423023039ca4870947ca0a568931dbcd75798218fe996","bbb38c08273af1587f3f78e990098e8170fad967596b1efa953d371ab5e66ffe","2706651764f380b8c6a4f13c4c789f9ff09a937879c4f926e7d6cfab49efc736","fd4f2fe081a95d36308604de219e1ff4ac39c20ce4437f2c5205b4dbb985ee23","979f904cd870ad1832906c898ea1511bc9ddd7e3dc658f334393555aff51f60a","cb652c19515421365623e93c8f17f8749dd71f783a11cfceec8af6f2d3efec67","e0eb51bca6e68e490a806d99145fa323bed979ded5bce9406cc39bf48fc6cede","6d5115041922f2279278f451ada3e9cd256690b7258d9e789640b2b97919128e","6b47d1533765a8fe766882eb411a4cf6ead3b0e29c680883d52a550ee72264e8","8f93c563d7c563da751df1a0efbe13b6ce9bd7032eb6dd0a995c545aff2f5a1d"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2524110285 · entry 108e9186e8c5677a87bd…

Expected log hash

34efb4ec1aab60168b83ec62d0334b8e10d9814c0de0cc0d3569d176ff20bc2d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787152786156","kind":"published-quote","locale":"fr","page":"theme:proton/service/fr","quote":"Je n'ai plus réussi à l'utiliser par la suite.","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1154a265a990…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.