Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Leaking Data on Darkweb”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
34e952e9f3c3f4a17479527db7bb6b7ec622fd5f8e85f78af84670f9234e811a
Signature (Ed25519, base64)
2AZk7ne0zc8XhOdGPZFv26ms64RPz6rxWaZP9RlMPgfA7deDkNrYkGirGf02bSaEBTODoVSXYERQrIMC49/MDA==
Merkle root
689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02
Merkle path
["34e65b1d9a63da9b6380ae7006842aa22a90e4f4c10922d9b808037544671b68","2033502e8f703ca8752b3766e16214052fab5def9e146041678a26ec29998cf0","6400fc321a68434d1ddd860ae10f47f30289187e54df45cf69043e4578ce98ff","498994aa042a4b048de1546efedc7046fbc4d464f627cbf1be51ae4d7c491090","730fb3f69a94252c1df9ffe3c40aec85bf0ec2e6da0b3d146d3263a822a2703a","7e8bd8a0134882e1057cacf6b6279ce18429a629f3ece4fa902df6e8fe9526d6","c88919ffa04891f5b04f172cf49aa6a96cc3fa95ca59f97a47541ade1cdee87b","bb9fb174b0f0da922c62926fe4275c8084adef559109e0caca96575300e33f1e","2e332ee49484cdc52df4855c461ee5e6fb867366798f41e712d04794ddac0b56","8b542394286a7a2aa966b16938dee0dc2be8b75cf9ffefba8fdbfdb8ba67aa5e","6c07dbc7e34c1aba50bf3a2f75576f43ba12c61b70b796120887476d5da80f93","6e94757a07f4af9870335b952c4e35e72035c55cc7586d88a376e6cbde54f88a","6d8f83a7009429b1ed94cc671d11a3d7b1c563aa0d334e405938afb4e103b1ca","b93077b5d0d90464bafb01f0d5e12407aea90af234685d3284ce5c610fc51b1e","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…
Expected log hash
68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787196781193","kind":"published-quote","locale":"de","page":"brand:nitro","quote":"Leaking Data on Darkweb","rating":1,"review_date":"2026-05-23","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id1608616539?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.