Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Now you have to pay a monthly fee”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
33e47baaf3b602efce265a3356cbc6de141b5d974e627f929c6c2a7e8c3df1a6
Signature (Ed25519, base64)
LdqAf2DILcKgH0eyfCEUrp+YQZ0PLxSlEau8oC5JXD2Vvhpu//RbEx/uvgD5nSUN+tcW5jT3pmrUZYa//MkxBg==
Merkle root
8e481f891fa4a8f9e77c0279ca152fab4383b65a50decc840d9fd7569bdfbaa3
Merkle path
["33e47d862f2402d36e2f6e7761a97b0522a6d2efa291ea65f9211015d0665503","4ca8d0575b7123b00d9d9368d9b890d987e07ba38ad8328ec22eed8d2147ba6d","c6381a8884276811c6e142b0662181e94ed8da1f691897a206ad58a522dbb22c","e0fd9e3b5f926b7193f3580f855e2212424b0fbf5fc0c7728f0b5cd6bcc9f005","0b01af46ec5fa7051db378ad3bcabfdcf8b8654aee7ba8e19cf22b93d1bc6e35","71eea66675c69c70d5acc277684d5d8973cd55a6247f57b40d0e8643ce5f6d4a","81d9b80e127b40a008a9c0ba92c7576158b3c88298133f77b9c02e0cca3aa141","332b265d8a94ac4cd63177ea94fb6210c4bbc228c7d8d5d748aa705926de18ec","1aff921730304da04b42f392a01864beed55d63b837731f388e390379f40f279","ab2161aa83b293fac999acf4b85b79b639fafbb5ecbc5101e56709a0155db7b3","19729ab4ee834af8b30994fc038b14e05f47d8c538ac4e3ff36845f3cbd9e938","a7aabdc256e01976bf56aedd2750701f155d95355e126564b57f87590d7c57d7","f12c6d940ab3feb9a920f8708be9c7f52b5aa4637463f6ea0927f2330e210f4f","391099ea13ca712ab4d3c0ebed9ae37f021122ce33d031a4f3442fcba2038ec0"]
Anchored
2026-10-12
Public log entry
search.sigstore.dev, log index 3220367991 · entry 108e9186e8c5677a60ce…
Expected log hash
9a2b3ddad9c3b29dc171a15554fc81f3d4710c01a7565bd2f28b92e7b639f6dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791776812348","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"Now you have to pay a monthly fee","rating":1,"review_date":"2026-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8e481f891fa4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.