Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Lizenzen werden jedes Jahr gewechselt”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683258276

Proof data

Record hash (SHA-256)

339450396a989acbdbeab02bd050a1bbf580700d7472b387b5cc0d529ff60bcd

Signature (Ed25519, base64)

ouG26SWp/CyaW94QFRV6psspK9gxWzANqq40NcCMbD422zV2Eu65/NXKzxbZEsl50ZxXSzahUAk03V7WoVOYDg==

Merkle root

1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56

Merkle path

["33956b8e81915c252c0e1f73f38f91c8095589ed484bc8d935463b237a78229f","01f8328ee4135acbdab198740f04396a558b94412ad128f004d187fddf7a8d03","bf24912dcec1365bab47e7219fb729fc352ad6df35ba97980c6638f25ebfa68b","811f45de2151fc774b967a7e72cc8b6d4315c95cc07c8961c0d6b3d7a124b891","153f27f45ad0574c6bca15418e79b7f59b0ae10c3a7bf1c23181b8a43f11374b","db01fdff91a61535594175dfe861743e094a1feee1e733a0a65a869a86daa292","8c3ac20aa04ab828e0fcd6bf71be00bef9ab87f1f44661fce8eba62791464d8f","48f60e5478be29c4b5c43956025dd8d7db67201a992819589b8872c437b9f52a","d9d6081c1f4a7a434d1ace781a171857a4facd7297386f83e82f8a8213d4e610","8c9c47ef779345beca6af83492439fcbb52df29c607d69918d6332fbd4916e50","143a7e1ea20bf5df1fba8b9ef6128f2f8152b6e598796581e27cea41948f2aa9","7a3d724d805a5f7702fcfd47a2478813d5361ab52c93ab520fd3692c70240ac1","05a90d241075e7f4c50bbe0b0ba3995ced328afb6f26ba9b8d7006707d1d2290","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…

Expected log hash

eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788322016973","kind":"published-quote","locale":"de","page":"brand:swisscom","quote":"Lizenzen werden jedes Jahr gewechselt","rating":1,"review_date":"2026-08-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.swisscom.tv2","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.