Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super App, die bitte nie eingestellt werden darf.”
Google Play · 5/5 · 2026-07-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2647332298

Proof data

Record hash (SHA-256): 32765afc99a9dba3502b5b9ba8063e93bdff8b7076b3cba224f7cb38bb82b46a
Signature (Ed25519, base64): 4k6vXM3Gm/OV9ydTjj3qaZZUaHXaCaCDBXaHI0z+m2I9cNPbd6TVj0UxlHM/6cu9tWi/cTiUZh3X9nNFtXDmBA==
Merkle root: f91c744e1108c1bb1ec3259bf4dd752db9e3b06ce3ca7c817c48f3174bb949cd
Merkle path: ["32765b490a3e19b43ef30456450b30f4eb15ae71fddfc4b328111c3ff12f096c","9285b143683890362a4c1ba969e76b3abfcc9b0296c3a8b997a88d9bbe657967","213ac7e7e5cdc6251fec1f03c3fd459109b6a056598c8c13b7dd6c7fd7d49739","5b23147ee8a4c8557e49e17a89cfa4de6e2908495d71ca29eacae76fccc4df49","cb54091ade5fcf4370b12263e20fcab26efe0c673285530050b0f4b7383a6e2e","1ea3fbb2b03ba308ea3f0cedc7d1d465e4295463f464b12a399057ac0370c38c","e9026fe377589bdb38fe076374dfe267a8da95c021f02c0d69623693ad4c5b72","832bf40ff5fe882f87712f75793107f9079747ff0243e921ce43e306db4ce0dd","f2006a205a60a2d70e72e42faf43146dd50d0e54aca2206f5c61ffb6e35a5623","30d5460cb450807f389ccecae47ae16c94712f0b05e5d1c07f2a247b26edbc79","a2e0bfeb76a35cb99f99b749a29aa18ecae17bad850bfb1e48d8a8c5e1fdb27b","182a246804d2942db75cfbc8a710728bbac99fe0f4bb5f453e86cd23c9990bf0","0e47c34e11f519102858fde77876c8c01feebde2bc4c309f900f224bbf484cb1","939bb6f35c7a9334365aa0f05d437301f5b11fd1649b761216a467d624b12d5a","7e33dd613a6ba5c13ea4ace578351ca5e0375312f966275d25485ca016b59318"]
Anchored: 2026-08-30
Public log entry: search.sigstore.dev, log index 2647332298 · entry 108e9186e8c5677ab309…
Expected log hash: 5d995478a14ac45f67e2121505e769136cf509c045e6701e0235a25f639d0a15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788058735671","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"Super App, die bitte nie eingestellt werden darf.","rating":5,"review_date":"2026-07-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=co.climacell.climacell","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f91c744e1108…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.